# OpenWAF Egress, open source

> An Apache-2.0 gateway that keeps provider keys out of your AI agents and checks every request before injecting the key from OpenBao or Vault.

OpenWAF Egress is now open source under the Apache License 2.0. Agents hold a placeholder token instead of the provider key; the gateway checks every request against the agent's allowed targets, an SSRF check, 27 prompt-injection detectors and data-leak patterns, and only then injects the real key from OpenBao or HashiCorp Vault. It ships as a container for linux/amd64 and linux/arm64 and as Linux and macOS binaries.

See the [OpenWAF Egress overview](https://developers.openwaf.dev/egress/) and the [quickstart](https://developers.openwaf.dev/egress/quickstart/).