🔒OpenClaw Hits Production With CrabTrap Security Layer
Brex's New Security Model for AI in Prod
TL;DR
Brex deploys OpenClaw with CrabTrap, an HTTP proxy using LLMs to judge traffic. Solves security concerns by shifting focus from code to network layer.
OpenClaw reaches production maturity in December 2025, but Brex's security team initially rejects it due to uncontrolled code execution risks. To address this, they introduce CrabTrap, an HTTP proxy that monitors outbound traffic and uses LLMs for policy enforcement. Only 2% of complex requests face significant latency issues, making the system viable for real-world use cases like 'Jim', a virtual recruiter handling candidate sourcing and scoring.

Key Points
OpenClaw reaches maturity in December 2025, enabling self-bootstraping and maintenance of its own codebases.
CrabTrap monitors all outbound traffic between containers and the internet, ensuring policy compliance with LLMs.
LLM judge introduces latency for complex requests but only affects about 2% of total traffic.
Brex's virtual recruiter 'Jim' handles sourcing candidates and scoring inbound applicants using OpenClaw.
CrabTrap relies on human-in-the-loop workflow to approve actions outside established policy.
Why It Matters
If you're deploying AI agents in production, Brex's CrabTrap shows how shifting security focus from code to network can mitigate risks. This approach enables faster deployment and reduces latency for routine tasks while maintaining strict controls on high-risk activities.
Frequently Asked Questions
Why does this matter?
If you're deploying AI agents in production, Brex's CrabTrap shows how shifting security focus from code to network can mitigate risks. This approach enables faster deployment and reduces latency for routine tasks while maintaining strict controls on high-risk activities.
What happened?
Brex deploys OpenClaw with CrabTrap, an HTTP proxy using LLMs to judge traffic. Solves security concerns by shifting focus from code to network layer.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 2,900 builders reading daily.