Pipelock 2.3.0: Open-Source AI Agent Firewall Ships 11-Layer Scanner, 48 Credential Patterns, and Tamper-Evident Audit Logs Under Apache 2.0

Help Net Security·medium signal

Pipelock 2.3.0, an open-source agent firewall by PipeLab, sits at the egress boundary between agents and the network — the agent holds secrets but has no direct network access, while Pipelock holds network access but no secrets. Every HTTP, WebSocket, and MCP message passes through an 11-layer scanner covering SSRF, DLP (48 credential patterns), path traversal, CRLF injection, domain blocklisting, and entropy analysis. Ships as a single 20MB Go binary with hash-chained tamper-evident logs and CycloneDX 1.6 agent SBOMs.