A hosted multi-client agent-tool gateway for agencies that enforces tenant policy, secret and capability boundaries, approval rules, redaction, and signed event evidence at verified paths.
Genesis score7.23/10
Make MeshFirewall real.0/500
500 more votes and MeshFirewall is authorized for build.
0%500 to authorize
Backing is the vote. When an idea crosses 500, we pull it into the build pipeline and ship it for real — the votes decide what gets built next, not an editor.
The opportunity
3+Confirmed open proxy peers
0Hosted multi-client peers found
0Universal attack detection
The case
Agencies run agent and tool stacks for multiple clients, creating cross-tenant, credential, tool-definition, prompt-injection, data-exfiltration, and audit risk. MeshFirewall evaluates covered requests and responses with deterministic controls plus detectors, then blocks, sanitizes, clarifies, or routes approval. It never claims to proxy every message, treats detection as complete, logs secrets by default, guarantees fail-closed availability, or calls a signed trail proof that traffic was safe.
Who pays — and why
Security, platform, and delivery leaders at agencies and professional-services firms operating separate agent-tool environments for clients.
What it unlocks
A tenant-scoped registry for client, environment, agent, server, tool, schema, owner, credential, secret class, data class, network destination, version, and trust state
Deterministic allowlists, scopes, targets, size limits, data rules, approval boundaries, and rate limits before heuristic detectors
Injection, exfiltration, poisoning, tool-change, and anomalous-flow candidates with confidence, coverage, false-result handling, and analyst review
Redacted signed event evidence with policy version, decision, execution result, bypass, outage, correction, incident, retention, and client export
How Genesis scored it
7.23across seven criteria
8
Temporal window
A cluster of new security tools validates urgent category formation.
8
Buyer persona
Agency security and platform leaders are concrete.
5
Convergence
Two cross-references and two inbound links provide moderate echo.
Why it scored well
A precise agency buyer, several open proxies validating the control point, and no hosted multi-client tier found support the direction.
What's holding it back
A major platform acquired one competitor, detection remains incomplete, hosted tenancy raises severe risk, bypass paths persist, and no structural copying barrier is evidenced.
Signals detected4 sources crossed
Signalrepository research carried in Genesis
SignalGenesis competitor analysis
Signalrepository research carried in Genesis
SignalGenesis market scan
Direction briefmeshfirewall.md
meshfirewall.md
Want this pointed at your vertical?Point Genesis at your own market and constraints — it invents adjacent, fork-ready ideas, private to you before they hit the public feed.
