About Arcjet
Arcjet is a runtime security platform for web applications and AI agents. It adds protections such as bot blocking, rate limits and prompt injection checks to the code you already run.
What it does
Arcjet sits inside your application and checks requests and agent actions against rules you set. It can block bots and automated abuse, limit request rates, validate email addresses and protect sign-up forms. For AI agents, it detects prompt injection, redacts personal data and can authorize individual tool calls against a policy. The console shows recent activity and keeps a log of what happened.
Key features
- Rate limiting and bot protection for web apps
- Prompt injection detection for agent input
- Redaction of sensitive personal information
- Policy checks on agent tool calls
- Email validation and sign-up form protection
Who it's for
Startups and backend teams that want protection without building it from scratch. Security teams that need visibility into the AI agents running across an organization will also find the console useful.
Pricing and good to know
Arcjet offers a free trial, and you can book a demo for larger deployments. Its SDKs cover Node.js frameworks such as Next.js and Express, plus Python frameworks such as Flask and FastAPI. The SDK repository is on GitHub under the Apache 2.0 license. Check the trial terms before you rely on the service in production.
Highlights
- Rate limiting and bot protection for web apps
- Prompt injection detection for agent input
- Redaction of sensitive personal information
- Policy checks on agent tool calls
- Email validation and sign-up form protection
