Block exfil and poisoning at the loop

Stop unsafe MCP tool calls at the agent loop — exfiltration, tool-poisoning, and SSRF — and hand auditors a tamper-evident, hash-chained trail of every decision.

$ forg firewall --incidents
blocked  47  this month
exfil    24   poisoning 14
ssrf     9    internal CIDRs
audit    chain intact  0 gaps
 

Exfil blocked on-device

Stop the unsafe call at the loop, not in a log you read hours later.

Hash-chained audit trail

A tamper-evident ledger any auditor can verify down to the single call.

SSRF protection

k-anonymized detections add threats other orgs saw, never your data.