securetron-gh / aifw

# AI-FW
#### The AI Firewall & Governance Gateway
**Every AI agent: identified, authorized, inspected, governed.**
Documentation · Website · Get started · Enterprise
AI-FW is the **AI firewall and governance gateway** between your AI agents and the models they call. Every prompt and response is inspected, governed, and routed, with provable agent identity and regulator-ready audit, all in one process that runs in your own environment.
- [x] **Fail-closed by design**: offline guardrails never delegate to third parties, no traffic while scanning is unhealthy
- [x] **Agents are identities**: A2A protocol, agent registry, mTLS, Kerberos, OIDC SSO, SCIM provisioning
- [x] **Cost savings without safety holes**: semantic-gated prompt compression and inspection-gated caching
- [x] **Audit you can hand to a regulator**: metadata-only transaction log with encrypted export to your SIEM
- [x] **Surfaces others cannot reach**: Claude inference hooks, Cursor Agent Hooks, MCP tool governance, M365 Copilot admin with agent sync
- [x] **Opt-in endpoint gateway**: images, audio, files, fine-tuning, and batches under the same inspection pipeline
## 🛡️ Features
Every feature is documented on aifw.io/docs and in this repository's `docs/` folder. Product updates and practical guidance are published on AI-FW Insights, with an RSS feed.
Legend: ✅ native · 🧩 via partner or plugin · ❌ not supported
| Category | Feature | Doc | Native |
|---|---|---|---|
| Security & guardrails | Prompt & response guardrails | Read | ✅ |
| Security & guardrails | Semantic intent analysis | Read | ✅ |
| Security & guardrails | Fail-open options (opt-in) | Read | ✅ |
| Security & guardrails | Claude inference hooks | Read | ✅ |
| Identity & agents | Identity & access (IDAM) | Read | ✅ |
| Identity & agents | Admin-issued API keys | Read | ✅ |
| Identity & agents | A2A agent protocol | Read | ✅ |
| Identity & agents | Chain of Command | Read | ✅ |
| Identity & agents | Agent self-enrollment | Read | ✅ |
| Cost | Completion cache | Read | ✅ |
| Cost | Prompt compression | Read | ✅ |
| Observability & audit | Observability & dashboard | Read | ✅ |
| Observability & audit | Risk profiles & auto-block | Read | ✅ |
| Observability & audit | Audit logs & export | Read | ✅ |
| Governance & compliance | Compliance module administration | Read | ✅ |
| Governance & compliance | Skills & Tools governance | Read | ✅ |
| Governance & compliance | IDE Artifacts | Read | ✅ |
| Governance & compliance | Configuration backup and restore | Read | ✅ |
| Integrations | M365 Copilot admin | Read | ✅ |
| Integrations | Claude Code, Cursor & MCP | Read | ✅ |
| Integrations | Cursor Agent Hooks and shims | Read | ✅ |
| Integrations | securetron-aifw hook package | Use the package | ✅ |
| Integrations | Endpoint gateway | Read | ✅ |
| Core & reference | Model routing & registry | Read | ✅ |
| Core & reference | Reliability | Read | ✅ |
| Core & reference | Advanced parameters | Read | ✅ |
| Core & reference | Prompt