Overview
RAXE provides think-time security for LangChain agents — real-time threat detection during inference, before action execution. Protect chains, ReAct agents, tools, memory, and RAG pipelines. What RAXE scans:- Agent prompts and reasoning
- Tool call requests and results
- Memory content retrieval
- RAG context injection
- Agent goal changes
- Inter-agent handoffs
Installation
Quick Start
Configuration Options
Agentic Security Scanning
The LangChain handler includes specialized methods for securing autonomous agents.Goal Hijack Detection
Detect when an agent’s objective is being manipulated:Tool Chain Validation
Detect dangerous sequences of tool calls:Agent Handoff Scanning
Scan messages between agents in multi-agent systems:Memory Scanning
Scan content before persisting to agent memory:Chain Integration
Agent Integration
RAG Protection
Protect RAG pipelines from indirect injection:Error Handling
Tool Policy
Restrict which tools agents can use:Monitoring
Check scan statistics:Best Practices
Start with log-only mode
Start with log-only mode
Begin with monitoring before enabling blocking:
Use tool policies for agents
Use tool policies for agents
Restrict dangerous tools to prevent security issues:
Validate goal changes
Validate goal changes
For long-running agents, periodically check for goal drift:
Handle blocked requests gracefully
Handle blocked requests gracefully
Always catch
SecurityException for user-friendly responses:Supported LangChain Versions
| LangChain Version | Status |
|---|---|
| 0.1.x | Supported |
| 0.2.x | Supported |
| 0.3.x | Supported |
OWASP Alignment
The LangChain integration protects against:| OWASP Risk | Protection |
|---|---|
| ASI01: Goal Hijack | validate_agent_goal_change() |
| ASI02: Tool Misuse | validate_tool_chain(), ToolPolicy |
| ASI06: Memory Poisoning | scan_memory_before_save() |
| ASI07: Inter-Agent Attacks | scan_agent_handoff() |
| ASI05: Prompt Injection | Automatic prompt/response scanning |
