kShield: An eBPF Runtime Defense Framework for Linux Kernel Privilege Escalation Attacks
-
Updated
Apr 12, 2026 - C
kShield: An eBPF Runtime Defense Framework for Linux Kernel Privilege Escalation Attacks
Runtime defense for AI agents. 24 inline defenses, 3 output scanners, MCP server, framework adapters.
Wraith is a low-level Rust security sensor that answers a question most tools can't: "is this process being exploited right now?" By focusing entirely on anomalous runtime behavior rather than known signatures or payloads, Wraith detects live exploits and uncovers zero-day vulnerabilities completely in advance of a patch.
Runtime firewall and operator console for AI agents: policy, approvals, egress controls, audit, and live safety telemetry.
Add a description, image, and links to the runtime-defense topic page so that developers can more easily learn about it.
To associate your repository with the runtime-defense topic, visit your repo's landing page and select "manage topics."