DefenseClaw: Cisco's Open-Source Agent Security Framework — Five-Minute Install, Continuous Runtime Scanning

Cisco Blogs·medium signal

Cisco open-sourced DefenseClaw at RSAC 2026 (March 23), a security framework that scans every skill, plugin, and MCP server before an agent runs and continues monitoring at runtime. It integrates Skills Scanner, MCP Scanner, AI BoM (bill of materials), and CodeGuard into a unified pipeline. Install takes ~5 minutes. Planned integration with NVIDIA OpenShell for kernel-level sandboxing. Built in response to OpenClaw's supply chain crisis where 20% of skills were found malicious after hitting 250K GitHub stars. Available on GitHub since March 27.