Solo.io Open-Sources AgentShield: Assume Every Attacker Is an Agent
pjausovec · x · 2026-10-23
Solo.io announced agentshield, an open-source defense project for Kubernetes and AWS built on the premise that every attacker is now an agent — one that reads the whole environment, tries every route, and never tires.
Architecture: four stages around one graph
- Read your systems: Go plugin packages per platform, with Kubernetes, Istio, Cilium, agentgateway, Falco, and AWS in the box; logs via OTLP or Amazon Data Firehose
- Map them in one graph: workloads, identities, policies, and exposures become nodes; relationships become typed edges, each assertion retaining the plugin, rule, and evidence behind it
- Detect changes: detectors check every graph change against the last coherent state; active rules turn matches into findings, novel paths go to an investigator model that walks the graph and answers with evidence
- Approved fixes only: nothing is applied without human approval
Self-hosted, bring-your-own-model, with full traceability from finding back to observation.
More from coding & agent
- NPCTalk makes every GTA V NPC talk back in cloned voices under 1s using open models — Prime-Paradox · 2026-10-23
- Vibe-proving ASAN equivalence with Claude unearths a wave of PHP memory bugs — jd_pressman · 2026-10-23
- Three small MoEs tested in one agent pipeline: Flint 40B fastest and cheapest, Nemotron chokes on edits — GapNew4766 · 2026-10-23
- Coding Agent Index v2.0 scores drop across the board: 20 of 21 configs decline — ArtificialAnlys · 2026-10-23
- Artificial Analysis launches Coding Agent Index v2.0 with lower scores across the board — ArtificialAnlys · 2026-10-23
- SWE-Atlas-QnA-AA benchmark: Muse Wonder Full tops revised repo Q&A grading at 68.8% — ArtificialAnlys · 2026-10-23