# Superagent

> Superagent is security for AI-native developers: vulnerability checks on every pull request with fixes shipped as pull requests, self-serve red teaming for web apps, repositories, and AI agents, endpoint-local monitoring and enforcement for coding agents, contributor trust scoring, and CLA enforcement on pull requests. Free for open source. Backed by Y Combinator.

This file is a curated map of https://www.superagent.sh for LLMs and agents. The documentation under /docs is the canonical reference for product behavior. The blog under /blog covers AI security research, benchmarks, and product announcements. The authenticated dashboard and the /api and /app paths are intentionally not listed; everything below is public.

Machine-readable interfaces:

- REST API: https://superagent.sh/api/v1, authenticated with an organization API key. OpenAPI 3.1 spec: https://www.superagent.sh/openapi/v1.yaml
- MCP server: https://www.superagent.sh/mcp — connect Cursor, Claude Code, or Codex CLI to Superagent over the Model Context Protocol.

## Getting started

- [Docs overview](https://www.superagent.sh/docs): What Superagent does — checks on every pull request, red teaming for apps and agents, guardrails for what agents do at runtime.
- [Quickstart](https://www.superagent.sh/docs/get-started/quickstart): Create an account, connect GitHub, and add the MCP server. Three steps, no new workflows.
- [Install GitHub Apps](https://www.superagent.sh/docs/get-started/install-github-apps): Install Superagent Security and Open CLA on chosen repositories to enable PR scans, contributor trust, red-team reports, and CLA checks.

## Product documentation

- [PR Scans overview](https://www.superagent.sh/docs/pr-scans): Vulnerability checks on every pull request, with findings on the exact line and fixes as pull requests.
- [Supply chain scanning](https://www.superagent.sh/docs/pr-scans/supply-chain-scanning): Detect risky dependency changes in pull requests with grouped inline findings and a dedicated GitHub check.
- [Agent monitoring](https://www.superagent.sh/docs/agents/agent-monitoring): Install the auto-updating standalone CLI, then monitor local and cloud coding agents with endpoint-local rules, durable alerts, and webhooks.
- [Creating agent rules](https://www.superagent.sh/docs/agents/creating-rules): Create endpoint security rules, choose monitor or enforce modes, and review catastrophic-action defaults.
- [Contributor Trust overview](https://www.superagent.sh/docs/contributor-trust): Know who is behind the code before it merges.
- [Contributor Agreements overview](https://www.superagent.sh/docs/contributor-agreements): CLA templates, versions, and signing workflows, enforced as a check on every pull request.
- [CLA templates](https://www.superagent.sh/docs/contributor-agreements/templates): Create and maintain CLA templates and versions that drive check runs on pull requests.
- [How CLA checks work](https://www.superagent.sh/docs/contributor-agreements/how-cla-checks-work): How Superagent evaluates CLA coverage on pull requests and what contributors see when checks fail.
- [Red Team overview](https://www.superagent.sh/docs/red-team): Self-serve red teaming against what you actually run: your app, repo, and agents.
- [Repository reports](https://www.superagent.sh/docs/red-team/repository-reports): Scan a GitHub repository for security vulnerabilities with an agent that reads the code.
- [Web app reports](https://www.superagent.sh/docs/red-team/web-app-reports): Browser-driven DAST against a live web application.
- [Agent reports](https://www.superagent.sh/docs/red-team/agent-reports): Adversarial tests against an AI agent in production.
- [Running reports](https://www.superagent.sh/docs/red-team/running-reports): Follow a red-team run from provisioning to results, and know what to do when one fails.
- [Findings overview](https://www.superagent.sh/docs/findings): One triage queue for every security issue, from red-team findings to GitHub advisories.

## API, MCP, and webhooks

- [REST API overview](https://www.superagent.sh/docs/api): Authenticate with the Superagent REST API and understand its common request and response format.
- [API: Findings](https://www.superagent.sh/docs/api/findings): List, retrieve, update, delete, and triage security findings through the REST API.
- [API: Reports](https://www.superagent.sh/docs/api/reports): List, retrieve, and create repository, Web app, and Agent security reports through the REST API.
- [API: Agents](https://www.superagent.sh/docs/api/agents): Manage endpoint clients, groups, security rules, pairing, and alerts through the REST API.
- [OpenAPI specification](https://www.superagent.sh/openapi/v1.yaml): OpenAPI 3.1 spec for the Superagent REST API (findings, reports, triage).
- [MCP server](https://www.superagent.sh/docs/mcp): Connect Cursor, Claude Code, or Codex CLI to Superagent over the Model Context Protocol.
- [Webhooks](https://www.superagent.sh/docs/webhooks): Send report, finding, and agent monitoring events to your own systems.

## Reference

- [Dashboard](https://www.superagent.sh/docs/reference/dashboard): The Superagent home page: onboarding checklist, org activity, and shortcuts into each product.
- [Repositories](https://www.superagent.sh/docs/reference/repositories): Connected GitHub repositories and the per-repo settings that control scans, trust checks, and CLA.
- [Settings](https://www.superagent.sh/docs/reference/settings): Organization profile, members, API keys, and webhooks in the Superagent dashboard.
- [Glossary](https://www.superagent.sh/docs/reference/glossary): Definitions of terms used in the Superagent dashboard and documentation.
- [Troubleshooting](https://www.superagent.sh/docs/reference/troubleshooting): Common issues with GitHub Apps, pull request scans, reports, findings, and CLA checks.

## Blog

- [When Terminal Output Owns Your Clipboard: OSC 52 in Warp](https://www.superagent.sh/blog/when-terminal-output-owns-your-clipboard-osc-52-in-warp): Affected Warp builds honored OSC 52 clipboard escape sequences from terminal output, allowing silent clipboard reads and writes with no default-deny gate.
- [A bad patch is worse than no patch](https://www.superagent.sh/blog/a-bad-patch-is-worse-than-no-patch): AI makes vulnerability discovery cheap, but closing vulnerabilities still requires validation, safe fixes, and human-reviewed merges.
- [Backburning Open Source: Partnering with dotenvx](https://www.superagent.sh/blog/backburning-open-source-partnering-with-dotenvx): How the dotenvx partnership finds vulnerabilities before attackers do and closes the silent window with hardened packages.
- [Frontier models miss 57% of threats in agent context](https://www.superagent.sh/blog/frontier-models-miss-57-percent-of-threats): 485 real artifacts through Claude 4.6 Opus with a security-focused system prompt missed 57% of the threats brin had already identified.
- [The Cline Incidents and the Broken Security Model](https://www.superagent.sh/blog/cline-incident-broken-security-model): Two Cline security incidents expose the same problem: AI agents treat untrusted content as instructions.
- [Launching brin.sh — realtime threat detection for agents](https://www.superagent.sh/blog/launching-brin-sh): Brin scores everything your agent is about to consume before it does. Free to use, no auth, no SDK, no signup.
- [What Can Go Wrong with AI Agents](https://www.superagent.sh/blog/what-can-go-wrong-with-ai-agents): Data leaks, compliance violations, unauthorized actions — how AI agents fail in ways traditional software doesn't.
- [We Bypassed Grok Imagine's NSFW Filters With Artistic Framing](https://www.superagent.sh/blog/grok-image-jailbreak): Text-to-image safety is broken; explicit content of a real person via basic compositional tricks.
- [AI Code Sandbox Benchmark 2026](https://www.superagent.sh/blog/ai-code-sandbox-benchmark-2026): Modal vs E2B vs Daytona vs Cloudflare vs Vercel vs Beam vs Blaxel, evaluated on developer experience and pricing.
- [The Threat Model for Coding Agents is Backwards](https://www.superagent.sh/blog/threat-model-for-coding-agents-is-backwards): With coding agents, the user is the victim, not the attacker.
- [AI Guardrails Are Useless](https://www.superagent.sh/blog/ai-guardrails-are-useless-in-their-current-form): Most guardrails are generic, static, and disconnected from what matters for your specific agent.
- [Introducing Superagent Guard](https://www.superagent.sh/blog/superagent-guard-frontier-guardrails-for-ai-agents): Purpose-trained models that detect prompt injections, identify jailbreak attempts, and enforce guardrails at runtime.
- [SOC-2 is table stakes now](https://www.superagent.sh/blog/soc-2-is-table-stakes): What actually matters for AI products beyond the certification badge.
- [Red Teaming AI Agents: What We Learned From 50 Assessments](https://www.superagent.sh/blog/red-teaming-ai-agents-learnings): Critical patterns from red teaming 50 AI agents across companies, industries, and setups.
- [Open Source AI Models: A Safety Score Reality Check](https://www.superagent.sh/blog/open-source-ai-model-a-safety-reality-check): Safety scores for open-weight models you can deploy without vendor lock-in.
- [Your System Prompt Is the First Thing Attackers Probe](https://www.superagent.sh/blog/your-system-prompt-is-the-first-thing-attackers-probe): Attacks on AI agents start by probing the instructions that define behavior, tools, and boundaries.
- [Your RAG Pipeline Is One Prompt Away From a Jailbreak](https://www.superagent.sh/blog/your-rag-pipeline-is-one-prompt-away-from-a-jailbreak): Malicious files, knowledge base poisoning, and indirect prompt injection turn RAG into an attack surface — and how to defend against it.
- [Practical guide to building safe & secure AI agents](https://www.superagent.sh/blog/practical-guide-to-ai-agent-safety): System prompts aren't enough; runtime protection against prompt injection, poisoned tool results, and the lethal trifecta.
- [AI Is Getting Better at Everything—Including Being Exploited](https://www.superagent.sh/blog/ai-is-getting-better-at-everything): The GPT-5.1 safety score drop shows capability and attack surface scale faster than safety.
- [Are AI Models Getting Safer? GPT vs Claude Over Time](https://www.superagent.sh/blog/gpt-vs-claude-ai-safety-benchmark): 18 months of Lamb-Bench safety scores for GPT and Claude models.
- [Introducing Lamb-Bench](https://www.superagent.sh/blog/introducing-lamb-bench): An adversarial testing framework that gives buyers and sellers a common AI safety measurement standard.
- [VibeSec: The Current State of AI-Agent Security and Compliance](https://www.superagent.sh/blog/vibesec-the-current-state-of-ai-agent-security-and-compliance): Notes from dozens of conversations with developers building AI agents and LLM-powered products.
- [The March of Nines](https://www.superagent.sh/blog/the-march-of-nines): The hidden reliability engineering between a working demo and a production AI system.
- [The case for small language models](https://www.superagent.sh/blog/the-case-for-small-language-models): Single-job agents deserve purpose-built models that run locally and can be retrained as your data evolves.
- [Why Your AI Agent Needs More Than Content Safety](https://www.superagent.sh/blog/why-your-ai-agent-needs-more-than-content-safety): Content filtering isn't enough when your AI takes actions.
- [Shipped: Runtime Redaction and Command-Line Security](https://www.superagent.sh/blog/runtime-redaction-and-cli-ship-week): Runtime redaction, a powerful CLI, URL whitelisting, and security directly in the developer workflow.
- [Three years later: AI can (now) defend AI](https://www.superagent.sh/blog/three-years-later-ai-can-now-defend-ai): What changed since Simon Willison's 2022 argument that "adding more AI" was the wrong fix for prompt injection.
- [Introducing Superagent — Defend Your AI Agents in Runtime](https://www.superagent.sh/blog/introducing-superagent): The runtime defense platform against prompt injections, malicious tool calls, and data leaks.
- [Alignment Faking: The New AI Security Threat](https://www.superagent.sh/blog/alignment-faking-the-new-ai-security-threat): Strategic deception by LLMs complicates traditional safety measures and necessitates technical countermeasures.
- [Announcing Support for Cursor Agent and OpenCode](https://www.superagent.sh/blog/cursor-agent-opencode-support): VibeKit's universal agent support provides a consistent security and observability layer across preferred agents.
- [Introducing VibeKit CLI](https://www.superagent.sh/blog/introducing-vibekit-cli): The safety layer for running AI coding agents with direct access to your environment.
- [Introducing Dagger Local Sandboxes](https://www.superagent.sh/blog/dagger-local-sandboxes): VibeKit support for Dagger-powered local AI code execution with container isolation and zero cloud dependencies.
- [Grok CLI Gets MCP Support](https://www.superagent.sh/blog/grok-cli-mcp-support): MCP support turns Grok CLI into a connected terminal agent that can use 1000+ development tools.
- [Introducing Cloudflare Sandboxes Support](https://www.superagent.sh/blog/cloudflare-sandboxes-support): VibeKit support for Cloudflare Sandboxes — AI code execution at the edge across 300+ global locations.
- [Introducing @vibe-kit/auth](https://www.superagent.sh/blog/introducing-vibekit-auth): Use Claude, Gemini, or Grok Max subscriptions across any application through secure OAuth flows.
- [Vibex: Rebuilding OpenAI Codex with VibeKit](https://www.superagent.sh/blog/vibex-rebuilding-openai-codex-with-vibekit): An open-source coding agent that runs tasks in secure E2B containers and produces working GitHub pull requests.
- [On vibe coding](https://www.superagent.sh/blog/on-vibe-coding): A new way of building software that skips the traditional engineering process.
- [Prompting is not a skill, prompting is engineering](https://www.superagent.sh/blog/prompting-is-not-a-skill-prompting-is-engineering): Prompts should be treated as engineered systems, not isolated tasks.
- [The death of AI agents](https://www.superagent.sh/blog/the-death-of-ai-agents): Why today's complex, over-engineered agent systems are about to be replaced.
- [ReAG: Reasoning-Augmented Generation](https://www.superagent.sh/blog/reag-reasoning-augmented-generation): Query documents with full context instead of retrieve-then-read chunking.
- [Agents that write their own tools](https://www.superagent.sh/blog/agents-that-write-their-own-tools): Really useful agents need specialized tools — and can write their own.
- [The 1700s paradox](https://www.superagent.sh/blog/the-1700s-paradox): Klarna CEO Sebastian Siemiatkowski's analogy about AI capability, examined.
- [The future of LLM costs](https://www.superagent.sh/blog/the-future-of-llm-costs): Competing visions of where Large Language Model pricing goes.
- [$2K Per Task](https://www.superagent.sh/blog/openai-s-o3-at-2k-per-task): OpenAI's o3 model marks PhD-level performance at a pivotal price point.
- [AI Agents vs RPA](https://www.superagent.sh/blog/ai-agents-vs-rpa): The widespread adoption of hardcoded workflows sold as AI agents.

## Customer stories

- [Customer stories](https://www.superagent.sh/customer-stories): How teams use Superagent in production.
- [How Capchase ships AI features without losing sleep](https://www.superagent.sh/customer-stories/capchase): Capchase runs every file, prompt, and web fetch through Superagent before it reaches an agent — enforced with a lint rule, not a README.
- [How dotenvx hardens open source secrets management](https://www.superagent.sh/customer-stories/dotenvx): Superagent probes dotenvx continuously and turns findings into upstream patches the dotenvx team can review, merge, and ship.

## Company

- [About Superagent](https://www.superagent.sh/about): Mission and team — an AI security team that finds, patches, and discloses vulnerabilities in code and agents. Backed by Y Combinator.
- [Changelog](https://www.superagent.sh/changelog): Product updates, newest first.
- [Blog index](https://www.superagent.sh/blog): All posts on AI security research, benchmarks, and product announcements.

## Optional

- [Legal](https://www.superagent.sh/legal): Hub for all Superagent legal documents.
- [Privacy policy](https://www.superagent.sh/legal/privacy-policy)
- [Dashboard terms](https://www.superagent.sh/legal/dashboard-terms)
- [Cookie policy](https://www.superagent.sh/legal/cookie-policy)
- [Usage policy](https://www.superagent.sh/legal/usage-policy)
- [API services agreement](https://www.superagent.sh/legal/api-services-agreement)
- [API data processing agreement](https://www.superagent.sh/legal/api-dpa)
- [Red teaming services agreement](https://www.superagent.sh/legal/red-teaming-services-agreement)
- [Red teaming data processing agreement](https://www.superagent.sh/legal/red-teaming-dpa)