Declaw

Declaw is a security-first sandbox platform/runtime for AI agents. It runs agent code and external API access inside isolated Firecracker microVM sandboxes while transparently intercepting outbound traffic for PII redaction, prompt-injection defense, network policy enforcement, credential vaulting, guardrails, audit logging, snapshots, volumes, and observability.