Prismor

Supply Chain and AI Security Autopilot. Open Sourced

[Prismor @prismor_dev]

Prismor is a self-improving security layer for AI agents and modern supply chain defense

Developers don't need a new SaaS, the future of secure software development is all local

Prismor lets you:
- redact secrets so agents dont read them
- secure supply chain package consumption
- skill and mcp scanning for prompt injection
- scan and fix vulnerabilities (safely and validated)
- all agent executions in a local self-serve dashboard

All open source!

[Prismor @prismor_dev]

@MatthewBerman Cool! since skills can be easily poisoned if referenced externally! We'd say every company needs an immunity-agent so agent trust is 📈
https://t.co/SSBqCmtrNj

[Prismor @prismor_dev]

@igorfomich that drift-detection seems stronger than what we do today. our vault is file level with 0600 perms and session level audit logging but we don't hash/sign individual secret files or watch for out of band mutation yet but have plans

[Prismor @prismor_dev]

Traditional IAM: you prove who you are.

Agent IAM: you prove who you are, what you're doing, why you're doing it, who asked you to, and whether the chain of delegation from human to orchestrator to sub-agent to tool was ever broken

Hence we added IAM feature to immunity-agent, so enterprises can customize as they want. Before any tool call executes: agent roles with explicit allow/deny lists, secrets and full protection. Users can even scope their agent commands so it doesn't go out of the guardrails

We're starting this with local first controls open source

[Prismor @prismor_dev]

@igorfomich Rotation works the same as its in a file-level and gets live immediately. Sub agents gets the same protection

[Prismor @prismor_dev]

https://t.co/ubsxAffnrX

[Prismor @prismor_dev]

Nice try lin!
Blocked by: https://t.co/SSBqCmtrNj

[Prismor @prismor_dev]

@aaron_epstein Might be related to GDP contribution

[Prismor @prismor_dev]

@Polymarket They're all buying in

[Prismor @prismor_dev]

@Chain_GPT @lagrangedev @AIVM_Network built a zero trust layer: https://t.co/dBFMhOnxX0

[Prismor @prismor_dev]

@sonicaghi Fair, we think agents should also have scope so context doesn't overflow https://t.co/D1gUe9A7sH

[Prismor @prismor_dev]

Traditional IAM: you prove who you are.

Agent IAM: you prove who you are, what you're doing, why you're doing it, who asked you to, and whether the chain of delegation from human to orchestrator to sub-agent to tool was ever broken

Hence we added IAM feature to immunity-agent, so enterprises can customize as they want. Before any tool call executes: agent roles with explicit allow/deny lists, secrets and full protection. Users can even scope their agent commands so it doesn't go out of the guardrails

We're starting this with local first controls open source

[Prismor @prismor_dev]

@Concordium @PeterMarirosans @ChrisJourdan Bets post we saw today! We added some thoughts here: https://t.co/D1gUe9A7sH

[Prismor @prismor_dev]

Traditional IAM: you prove who you are.

Agent IAM: you prove who you are, what you're doing, why you're doing it, who asked you to, and whether the chain of delegation from human to orchestrator to sub-agent to tool was ever broken

Hence we added IAM feature to immunity-agent, so enterprises can customize as they want. Before any tool call executes: agent roles with explicit allow/deny lists, secrets and full protection. Users can even scope their agent commands so it doesn't go out of the guardrails

We're starting this with local first controls open source

[Prismor @prismor_dev]

Open for community contribution! #AiSecurity
https://t.co/dBFMhOnxX0

[Prismor @prismor_dev]

@1clawAI @SpritzChat This is awesome! We need the industry to secure the boring invisible layer

[Prismor @prismor_dev]

@nicorodrigues__ This is wild!

[Prismor @prismor_dev]

@Dinosn Or use immunity-agent. No sign-ups!
https://t.co/dBFMhOnxX0

[Prismor @prismor_dev]

@kristovatlas @AISecHub Thanks for sharing!

[Prismor @prismor_dev]

@OpenHackAI Great! congrats on the launch @ananayarora

[Prismor @prismor_dev]

@anton_chuvakin @Gartner_inc 30% might be an understatement but we'll give it to Gartner. Fair enough

[Prismor @prismor_dev]

https://t.co/160HpXLD8i

[Prismor @prismor_dev]

Your AI coding agent now blocks access to cloud credential endpoints, catches personal data (SSNs, card numbers) showing up where it shouldn't, and ignores anyone trying to hijack its instructions mid-session

Add one line to your config. That's the whole setup
pip install immunity-agent