Solo.io, the leading provider of cloud native connectivity and AI-ready infrastructure, has announced agentshield, a new open source project that defends the data, APIs, and services an organization already runs against autonomous AI agents. While existing approaches focus on attaching security to the agents you control, agentshield creates a layer of protection around your existing infrastructure for the agents you don't.
Solo.io has introduced agentshield, an open source project defending existing infrastructure against autonomous AI agents.
Agent security today focuses on controls for the agent, which only work for agents that execute within a control point the organization operates.
The biggest gap is attacker agents, external agents that misbehave, and an organization's own agents when they escape their sandbox or evade their guardrails.
Adversaries move from initial foothold to lateral movement in an average of 29 minutes, and in as little as 27 seconds, with AI-enabled adversary operations growing 89% year over year, according to CrowdStrike.
Agentshield gives platform and security teams five capabilities: plugins at every layer, one attack-path graph, rules at the rate the graph changes, actionable findings and remediation by a human or agent.
It is part of the Solo.io agentic stack alongside agentgateway, kagent, agentregistry, agentdesktop and agentevals.
"Assume breach taught the industry to plan for an attacker already inside. Agentshield extends that premise by one step: assume agent," Solo.io said in the announcement.
Agent security today focuses on controls for the agent: identity, guardrails, runtime policy, and a human in the loop. These controls are essential building blocks for secure agentic infrastructure, but they only work for agents that execute within a control point the organization operates. The biggest gap is everything that doesn't: attacker agents built to break in, external agents that misbehave or drift from their intended purpose, and an organization's own agents when they escape their sandbox or evade their guardrails.
The gaps those agents find are rarely new. Breach investigations keep turning up stolen credentials that still work, permissions nobody trimmed, and workloads that can reach systems they never needed. A human attacker might never stumble onto the one forgotten path. An agent that keeps trying paths and re-plans after every block will.
Incidents documented this year show what that looks like when the attacker is an agent. Autonomous agents have reached cluster-wide administrative access and harvested thousands of credentials in under six hours from little more than a prompt. The techniques employed in these attacks were familiar. The tempo, persistence, and continuous re-planning were not.
Agentshield is built for defense in depth against the specific attributes of agent attackers. It gives platform and security teams five capabilities:
Plugins at every layer of your infrastructure: Instrument what you already run, platform to kernel, with zero change to the services themselves.
One attack-path graph: A complete picture of lateral movement and blast radius: what can be reached from where.
Rules at the rate the graph changes: Reasoning based on frontier and open source models allow rules to be generated at admission-time to the graph with continuous evaluation at runtime.
Findings built for action: Severity, affected systems, supporting evidence, and remediation steps, so a finding is something you can act on, not just read.
Remediation by a human or by an agent: Human operators can move from dashboard to applying a fix with remediation advice or pass findings as context to an agent to automate remediation.
The Solo.io agentic stack provides everything teams need to develop, deploy, and operate AI agents across agentic runtime environments. It includes agentshield, agentgateway, kagent, agentregistry, agentdesktop and agentevals, powered by core open source projects created and contributed to the community by Solo.io.
To join the agentshield community and get started, visit the project announcement blog, the agentshield project site, the documentation, or contribute via GitHub.
About Solo.io
Solo.io is reimagining infrastructure for cloud and AI, uniting secure, seamless cloud connectivity with AI-ready, agentic infrastructure. Trusted by leading enterprises worldwide, Solo.io helps organizations securely connect applications, services, and AI workloads across any environment. From AI infrastructure to API gateways and service mesh, our solutions simplify and unify application networking, enabling teams to accelerate innovation, scale intelligently, and leverage the full potential of modern AI agents.
