Bundle (6 ZIPs + PDFs)Six kits written in response to the Oct 21, 2026 Railway and LiteLLM incidents: Secrets Exposure & Rotation, AI Library Supply-Chain Defense, Inference Key Abuse & Spend Caps, CI & Registry Credentials, Third-Party OAuth Grant Revocation, and the Agent Cyber Defense Dashboard that shows all of their results in one place.
What's inside
- Agent Secrets Exposure & Rotation Kit: What to do when a host, package or CI system may have leaked the keys your agents use: a 30-minute first-response runbook (pause sending/paying agents, rotate at the issuer, revoke delegated OAuth grants, check for misuse), a secrets inventory template ranked by blast radius, an incident record, and rotation_check.py, which flags unrevoked, stale or unowned credentials and refuses real secret values..
- AI Library Supply-Chain Defense Kit: For teams whose agents depend on fast-moving AI libraries (LiteLLM, OpenAI/Anthropic SDKs, LangChain, MCP): an Oct 21 response section for the poisoned litellm 1.107.0 release, a pin-and-hash-lock policy for pip, npm and container images, an upgrade-quarantine routine, and supply_chain_check.py, which flags unpinned AI libraries, known-bad versions, undigested images and the indicator files named in LiteLLM's notice.
- Inference Key Abuse Detection & Spend Caps Kit: Stolen AI provider keys get used to run someone else's workload on your bill.
- CI, Registry & Release-Pipeline Credential Kit: Both Oct 21 incidents ran through build credentials: Railway asked users to roll private registry credentials and reset GitHub tokens, and LiteLLM's poisoned release was published with leaked developer GitHub CLI tokens.
- Third-Party OAuth Grant Revocation Kit: When a vendor that holds tokens to your accounts may be breached (as with apps hosted on Railway on Oct 21), revoking its access at each platform is the step that works even while the vendor is down.
- Agent Cyber Defense Dashboard: One self-hostable, local-only HTML dashboard (no network calls by default) that unifies every Agent Field Kit cyber tool: secrets rotation status, AI-library supply-chain findings, inference spend anomalies, OAuth grants, CI and registry credential findings, approval-gate metrics, and advisories matched to your stack.
Six kits bought separately would be $174. Every kit is templates and scripts you run on your own systems; nothing connects to our servers.
Choose your option
Bundle + 1 year of Pro
Bundle + 1 year of Pro updates: $199 one-time. All 6 cyber kits now, plus 12 months of automated updates through the MCP server (stack matching, full advisories, kit and dashboard updates). No auto-renew.
Live today with your Pro key: check_my_stack stack matching, full advisory detail and history, hardening checklists for 24 agent stacks, and the get_cyber_dashboard_data feed the dashboard loads (advisories plus current kit versions). Coming soon: updated kit files delivered through the MCP server. Key is valid 365 days; renew any time at the Pro annual price ($190/year). Nothing is charged again unless you choose to.
Bundle only
All 6 cyber kits as ZIP + PDF downloads. One user. No API key.