---
title: 'Panguard AI'
sidebarTitle: 'Introduction'
description: 'The first open standard for AI agent security. 419 ATR detection rules. OWASP Agentic Top 10: 10/10 covered. 16 platforms. Community is free and open source.'
icon: 'shield-check'
---

<Note>
  **v1.5.6 released** -- 16 AI platform support, 419 ATR rules, OWASP Agentic Top 10 full coverage, 67,799 skills scanned with 1,096 confirmed malicious.
  [See changelog](/changelog).
</Note>

Panguard AI is the first open-source security platform built for the AI agent era. As AI agents gain root-level access to production systems, Panguard provides the detection rules, enforcement engine, and collective intelligence network to keep them in check.

**One command. Full protection. No account required.**

```bash
curl -fsSL https://get.panguard.ai | bash
```

---

## By the Numbers

|                                    |                                                                                                                                         |
| ---------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------- |
| **419** detection rules            | ATR (419) + community                                                                                                                   |
| **16** AI platforms                | Claude Code, Claude Desktop, Cursor, OpenClaw, Codex, WorkBuddy, NemoClaw, ArkClaw, Windsurf, QClaw, Cline, VS Code Copilot, Zed, Gemini CLI, Continue, Roo Code |
| **OWASP 10/10**                    | Full coverage of OWASP Agentic Top 10 for Agentic Applications 2026                                                                    |
| **3-layer** AI pipeline            | Rules engine, local AI (Ollama), cloud AI (Claude/OpenAI)                                                                               |
| **12** MCP tools                   | Scan, audit, guard, threat search, and more                                                                                             |
| **8-check** Skill Auditor          | Gates every AI skill before install                                                                                                     |
| **0** accounts required            | No login, no signup, no API key needed to start                                                                                         |

---

## OWASP Agentic Top 10: Full Coverage

ATR rules map to every category of the [OWASP Top 10 for Agentic Applications 2026](https://owasp.org/www-project-top-10-for-agentic-applications/):

| OWASP Category | ATR Rules | Coverage |
| --- | --- | --- |
| ASI01: Agent Goal Hijack | 13 rules | STRONG |
| ASI02: Tool Misuse & Exploitation | 11 rules | STRONG |
| ASI03: Identity & Privilege Abuse | 9 rules | STRONG |
| ASI04: Agentic Supply Chain | 8 rules | STRONG |
| ASI05: Unexpected Code Execution | 8 rules | STRONG |
| ASI06: Memory & Context Poisoning | 8 rules | STRONG |
| ASI07: Inter-Agent Communication | 5 rules | MODERATE |
| ASI08: Cascading Failures | 4 rules | MODERATE |
| ASI09: Human-Agent Trust | 5 rules | MODERATE |
| ASI10: Rogue Agents | 7 rules | MODERATE |

Full mapping: [OWASP-MAPPING.md on GitHub](https://github.com/Agent-Threat-Rule/agent-threat-rules/blob/main/docs/OWASP-MAPPING.md)

---

## Three Pillars

<CardGroup cols={3}>
  <Card title="ATR -- The Standard" icon="file-code" href="/overview">
    **419 rules across 10 threat categories.** The first open standard for AI agent threats -- prompt
    injection, tool poisoning, skill compromise, agent manipulation. YAML-based, human-readable,
    machine-enforceable. OWASP Agentic Top 10: 10/10 covered.
  </Card>
  <Card title="Threat Cloud -- The Network" icon="globe" href="/products/threat-cloud/overview">
    **Collective immunity.** Every install contributes anonymized threat signals. The pipeline
    auto-generates rules from real-world attacks. 11 intel sources. Synced every hour.
  </Card>
  <Card title="Guard -- The Engine" icon="shield-halved" href="/products/guard/overview">
    **4-agent AI pipeline.** Detect, Analyze, Respond, Report. Processes OS-level events through 419
    ATR rules. Built-in Skill Auditor. Auto-response blocks IPs, kills processes, quarantines files.
  </Card>
</CardGroup>

---

## Quick Start

Install, scan, and protect in 4 commands:

```bash
curl -fsSL https://get.panguard.ai | bash
panguard setup
panguard scan --quick
panguard guard start --dashboard
```

`panguard setup` auto-detects all 16 AI platforms on your machine and injects the correct MCP or native Skill configuration for each.

`panguard guard start --dashboard` starts 24/7 protection and opens a local dashboard in your browser at `http://127.0.0.1:9100`.

<CardGroup cols={2}>
  <Card title="Step-by-step Quick Start" icon="rocket" href="/quickstart">
    Detailed walkthrough with expected output for each step.
  </Card>
  <Card title="Installation Guide" icon="download" href="/installation">
    Platform-specific instructions for macOS, Linux, and Windows.
  </Card>
</CardGroup>

---

## Platform-Specific Setup

<Tabs>
  <Tab title="Auto-detect all platforms">
    ```bash
    curl -fsSL https://get.panguard.ai | bash && panguard setup
    ```

    Auto-detects and configures all 16 supported AI platforms in one command: Claude Code, Claude Desktop, Cursor, OpenClaw, Codex, WorkBuddy, NemoClaw, ArkClaw, Windsurf, QClaw, Cline, VS Code Copilot, Zed, Gemini CLI, Continue, Roo Code.

  </Tab>
  <Tab title="OpenClaw">
    ```bash
    curl -fsSL https://get.panguard.ai | bash && panguard setup --platform openclaw
    ```

    Installs as a native **Skill** at `~/.openclaw/skills/panguard/SKILL.md`. Restart OpenClaw, then:

    ```
    > Audit the skills in this project
    > Scan my machine for vulnerabilities
    > Start real-time protection
    ```

  </Tab>
  <Tab title="NemoClaw">
    ```bash
    curl -fsSL https://get.panguard.ai | bash && panguard setup --platform nemoclaw
    ```

    Registers as an **MCP server** in NemoClaw's configuration. Restart NemoClaw to access 12 security tools.

  </Tab>
  <Tab title="ArkClaw">
    ```bash
    curl -fsSL https://get.panguard.ai | bash && panguard setup --platform arkclaw
    ```

    Registers as an **MCP server** in ArkClaw's configuration. Restart ArkClaw to access 12 security tools.

  </Tab>
</Tabs>

<Tip>
  For manual configuration and troubleshooting, see the [platform setup guide](/guides/claw-setup).
</Tip>

---

## Who is Panguard AI for?

<CardGroup cols={3}>
  <Card title="Developers" icon="laptop-code">
    Secure your servers, VPS, and dev machines with zero configuration. One command, then back to
    work.
  </Card>
  <Card title="Small Businesses" icon="building">
    Compliance-ready security without a dedicated team. Auto-generate ISO 27001, SOC 2, and Taiwan
    TCSA audit reports.
  </Card>
  <Card title="MSPs" icon="server">
    Monitor and protect endpoints with real-time Guard protection.
  </Card>
</CardGroup>

---

## Why Panguard AI?

Traditional security tools cost six figures and require dedicated teams. Free tools exist but are unusable without security engineers.

Panguard takes a different approach:

- **One command install** -- no config files, no tuning, no jargon
- **Plain language alerts** -- Telegram, Slack, Email, LINE in your preferred language
- **AI auto-triage** -- the system judges severity, responds, and reports autonomously
- **Gets smarter over time** -- behavioral baselines adapt to your environment
- **Skill Auditor** -- gates every AI skill before install, prevents supply chain attacks
- **Community is free** -- MIT licensed, 419 ATR rules, unlimited self-host, no signup required. For production deployments at F500 scale, [Pilot ($25K / 90 days)](https://panguard.ai/pricing), [Enterprise ($150K-500K / year)](https://panguard.ai/pricing), and [Sovereign ($5-20M / nation)](https://panguard.ai/pricing) tiers add Migrator Pro, 5-framework compliance evidence, airgap deployment, and SLA.

---

## Research Paper

ATR is backed by a peer-reviewed research paper documenting the methodology, detection architecture, and evaluation results.

> **Agent Threat Rules: A Community-Driven Detection Standard for AI Agent Security**
> Published on [Zenodo (DOI: 10.5281/zenodo.19178002)](https://doi.org/10.5281/zenodo.19178002). Under review at arXiv and SSRN.

The paper covers: threat taxonomy, detection architecture (regex + LLM crystallization), PINT MCP benchmark evaluation (62.5% recall, 99.6% precision on 850 samples), SKILL.md benchmark (100% recall, 97% precision, 0.2% FP on 498 real-world samples), Garak benchmark (97.1% recall on 666 samples), and 64 documented evasion techniques.

---

## 100% Open Source

Every feature is free. Full source code. Zero black boxes. Every line is auditable.

<CardGroup cols={2}>
  <Card
    title="Panguard AI on GitHub"
    icon="github"
    href="https://github.com/panguard-ai/panguard-ai"
  >
    Star the repo, browse source, report issues, or contribute.
  </Card>
  <Card
    title="ATR Rules on GitHub"
    icon="file-code"
    href="https://github.com/Agent-Threat-Rule/agent-threat-rules"
  >
    The open standard for AI agent threat detection. Contribute rules to strengthen collective
    immunity.
  </Card>
</CardGroup>

---

## Explore

<CardGroup cols={2}>
  <Card title="Product Overview" icon="shield-check" href="/overview">
    Deep dive into the three pillars: ATR, Threat Cloud, and Guard.
  </Card>
  <Card title="CLI Reference" icon="terminal" href="/cli/overview">
    Complete command reference for every Panguard CLI tool.
  </Card>
  <Card title="API Reference" icon="code" href="/api-reference/overview">
    REST API docs for Threat Cloud.
  </Card>
  <Card title="Concepts" icon="lightbulb" href="/concepts/three-layer-ai">
    Understand the three-layer AI architecture powering Panguard.
  </Card>
</CardGroup>
