iron-proxy
github.com/paradigmxyz/iron-proxy- Category
- Developer Tools
- Rank
- No. 1195Tools index
- Pricing
- Open Source
- Type
- TOOL
- Builder
- @gakonst
- GitHub
- 581 stars
- Latest release
- v0.50.0-rc.2
- Added
- Aug 11, 2026
About
iron-proxy is a MITM egress proxy with a built-in DNS server that enforces default-deny network access for untrusted workloads like CI jobs, sandboxed containers, and AI coding agents. It swaps proxy tokens for real secrets only at the network boundary and logs every request with a structured audit trail, so a compromised workload can't exfiltrate usable credentials or reach unapproved destinations.
Why it made the leaderboard
Sandboxing agent network access and keeping real secrets out of the agent's reach is an unsolved operational problem for most teams running coding agents, and this is a deployable implementation rather than a policy document.
Tags
egress-firewallproxyci-cdai-agentssecrets-managementsandboxingnetwork-securitymitm
Tech Stack
Go
Comments (0)
No comments yet
Indexed by a proprietary survey. Corrections welcome.