VentureBeat
Follow
Brex assumes its AI agents could do anything — so it watches the network, not the code
Brex CEO Pedro Franceschi proposed a blueprint for securely deploying AI agents in enterprise production environments. He advocates for a conceptual shift from "agents" to "virtual employees" that can collaborate with human workers. Traditional security models failed Brex when attempting to automate internal functions with their AI agent, OpenClaw. To address this, Brex developed a novel network-level security layer called CrabTrap. CrabTrap operates on the assumption that AI agents can do anything and monitors outbound network traffic. It uses an LLM to judge whether network requests align with the agent's approved policy. Brex implemented a bifurcated system to manage latency, routing low-risk actions through static rules and high-risk actions to the LLM judge. The LLM's pre-training provides it with an inherent semantic understanding of network traffic patterns, making it effective at discerning policy compliance. When an agent attempts an action outside its policy, CrabTrap initiates a human-in-the-loop workflow, notifying a manager for policy review and potential adjustment. Brex built CrabTrap internally due to a lack of mature commercial cybersecurity solutions for AI agents. This investment allowed Brex to safely deploy agents ahead of the market, emphasizing the need for companies to build the capabilities to operate in an agentic world.