AIToday
AI Business & IndustryAI Safety & AlignmentLarge Language ModelsVentureBeat AIPublished: Jul 18, 2026, 04:00 JST2 min read

Brex builds AI agent control layer at network level, not in rules

Key takeaway

  • Brex has open-sourced CrabTrap, a network proxy that intercepts AI agent requests and uses an AI judge to approve or deny them based on policy rules.

  • The company discovered that traditional guardrails cannot contain agents equipped with real credentials like API keys, and shifted enforcement from the code level to the network layer.

  • CEO Pedro Franceschi argues that IT leaders should adopt similar centralized network control rather than relying on SDK-level permissions.

3 Key Points

  1. What happened

    Brex created CrabTrap, an open-source HTTP/HTTPS proxy that intercepts all network traffic from AI agents, examines policy rules, and uses an LLM-as-a-judge to approve or deny requests. The company found that traditional guardrails could not contain what agents were doing with real credentials like API keys and OAuth tokens.

  2. Why it matters

    Brex's approach addresses a gap in how AI agents are currently governed—frameworks like OpenClaw enable agents to act, but lack enterprise-scale safeguards. By enforcing policy at the network layer rather than in the agent's code, organizations can audit and control agent behavior in real time, even when agents have genuine credentials to systems that matter.

  3. What to watch

    Brex CEO Pedro Franceschi frames this as a shift in how IT leaders should think about agent governance: moving from SDK-level permissions and model guardrails to centralized network control. How widely CrabTrap is adopted, and whether other enterprises adopt similar network-layer enforcement, will signal whether this architectural approach becomes standard practice.

Ask the AI about this article →

Context & Analysis

The article identifies a structural gap in how AI agents are currently managed. OpenClaw and similar agentic frameworks have become widely adopted, but they operate without proven safeguards at enterprise scale. The challenge is that agents need genuine credentials—API keys, OAuth tokens, service accounts—to be useful, yet traditional guardrails (permissions embedded in the agent's code or baked into the model) cannot effectively limit what agents do once those credentials are in hand.

Brex's insight is architectural: the network layer becomes the enforcement point. Every request an agent makes traverses the network, creating an observation and control opportunity that is independent of the agent's code or training. By placing a proxy at this chokepoint and having it evaluate each request against policy rules using an LLM-as-a-judge, Brex sidesteps the limitations of SDK-level permissions and model-level guardrails. Franceschi's message to IT leaders is that this shift—from application-layer controls to network-layer controls—should become the standard practice for agent governance.

FAQ

How does CrabTrap actually control what agents do?
CrabTrap is an HTTP/HTTPS proxy that intercepts all network traffic from agents, examines policy rules, and uses a LLM-as-a-judge to decide whether each request should be approved or denied.
Why doesn't Brex just use traditional guardrails?
Brex found that traditional guardrails could not contain what agents were doing once they had real credentials like API keys, OAuth tokens, and service accounts.
VentureBeat AIRead Original Article

Get the latest AI Business & Industry news every morning

For example, today's edition would include:

  • Phonely launches Alma, voice AI trained on 10M callsSiliconANGLE AI · 54m ago
  • Aranya raises $11M to turn bare-metal servers into AI clusters in 48 hoursSiliconANGLE AI · 54m ago
  • CBTS launches Forge Agents for custom AI agentsSiliconANGLE AI · 54m ago

AI-summarized, only the topics you pick — one digest a day via Email, Slack, or Discord.

Free · takes 30 seconds · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. Q&As are published on this page for other readers too.

Related Articles

Next articleApple sues OpenAI over alleged market conduct