What problem does it solve? Deploying an LLM agent to production exposes it to prompt injection, data leakage, cost abuse, and API-level attacks, and most teams lack a single end-to-end security map covering both the agent and its HTTP boundary. ## Core Features & Use Cases - Two-layer defense model: Covers agent/LLM security (OWASP LLM Top 10: prompt injection, PII leakage, token budget abuse, least-privilege tools) and FastAPI REST API security (OWASP API Top 10: JWT validation, authz per resource, rate limiting, CORS, TLS, secure headers). - Critical FastAPI blockers: Lists 11 mandatory production items including real JWT validation, bcrypt/argon2 password hashing, refresh tokens, CSRF, SQL injection prevention, secure file upload, TrustedHost, and dependency scanning with bandit/pip-audit/safety. - Production checklist: Provides a ready-to-use security checklist spanning agent guardrails, API hardening, IAM least-privilege, secrets management, and WAF/DDoS edge protection. - Use Case: Before exposing an Agno agent behind API Gateway and FastAPI, walk the checklist to confirm guardrails are active, JWT is properly validated, errors leak no stack traces, and dependencies are pinned and audited in CI. ## Quick Start Ask the agent to review your FastAPI agent deployment against the production security checklist and identify which critical items are missing.
