Every AI agent: identified, authorized, inspected, governed.
AI-FW is the AI firewall and governance gateway between your AI agents and the models they call. Every prompt and response is inspected, governed, and routed, with provable agent identity and regulator-ready audit, all in one process that runs in your own environment.
- Fail-closed by design: offline guardrails never delegate to third parties, no traffic while scanning is unhealthy
- Agents are identities: A2A protocol, agent registry, mTLS, Kerberos, OIDC SSO, SCIM provisioning
- Cost savings without safety holes: semantic-gated prompt compression and inspection-gated caching
- Audit you can hand to a regulator: metadata-only transaction log with encrypted export to your SIEM
- Surfaces others cannot reach: Claude inference hooks, Cursor Agent Hooks, MCP tool governance, M365 Copilot admin with agent sync
- Opt-in endpoint gateway: images, audio, files, fine-tuning, and batches under the same inspection pipeline
Every feature is documented on aifw.io/docs and in this repository's docs/ folder. Product updates and practical guidance are published on AI-FW Insights, with an RSS feed.
Legend: ✅ native · 🧩 via partner or plugin · ❌ not supported
| Category | Feature | Doc | Native |
|---|---|---|---|
| Security & guardrails | Prompt & response guardrails | Read | ✅ |
| Security & guardrails | Semantic intent analysis | Read | ✅ |
| Security & guardrails | Fail-open options (opt-in) | Read | ✅ |
| Security & guardrails | Claude inference hooks | Read | ✅ |
| Identity & agents | Identity & access (IDAM) | Read | ✅ |
| Identity & agents | Admin-issued API keys | Read | ✅ |
| Identity & agents | A2A agent protocol | Read | ✅ |
| Identity & agents | Chain of Command | Read | ✅ |
| Identity & agents | Agent self-enrollment | Read | ✅ |
| Cost | Completion cache | Read | ✅ |
| Cost | Prompt compression | Read | ✅ |
| Observability & audit | Observability & dashboard | Read | ✅ |
| Observability & audit | Risk profiles & auto-block |