ShieldCortex

Complete Memory & Security for AI Agents

ShieldCortex gives your AI agent persistent memory AND protects it from attack. One package. Full solution.

Most AI agents are stateless — they forget everything between sessions. ShieldCortex fixes that with production-grade persistent memory. But memory creates risk: researchers have demonstrated memory poisoning attacks that hijack AI behaviour. ShieldCortex is the only solution that solves both problems.

┌─────────────────────────────────────────────────────────────┐
│                      ShieldCortex                           │
├─────────────────────────────┬───────────────────────────────┤
│     MEMORY SYSTEM           │     SECURITY LAYER            │
├─────────────────────────────┼───────────────────────────────┤
│ • Persistent storage        │ • Memory firewall             │
│ • Semantic search           │ • Prompt injection detection  │
│ • Project scoping           │ • Credential protection       │
│ • Importance ranking        │ • Sub-agent access control    │
│ • Auto-cleanup & decay      │ • Full audit trail            │
│ • Category organisation     │ • Threat quarantine           │
└─────────────────────────────┴───────────────────────────────┘

Stop choosing between memory and security. Get both.

What You Get

Memory System (Production-Ready)

• Persistent storage — SQLite-backed, survives restarts
• Semantic search — Find memories by meaning, not just keywords
• Project scoping — Isolate memories per project/context
• Importance levels — Critical, high, normal, low with auto-decay
• Categories — Architecture, decisions, preferences, context, learnings
• Auto-cleanup — Configurable retention, importance-based expiry
• Full MCP support — Works with any MCP-compatible agent

Security Layer (5 Defence Layers)

Attack Vectors Blocked

• Direct injection — [SYSTEM: ignore previous] hidden in content
• Credential harvesting — Attempts to exfiltrate secrets
• Encoding tricks — Base64/hex/unicode payloads
• Slow-burn assembly — Attack fragments planted over days
• Privilege escalation — System command references

Quick Start

# Install globally
npm install -g shieldcortex

# Auto-configure for your agent (Claude Code, OpenClaw, LangChain, etc.)
npx shieldcortex setup

# That's it. Your agent now has persistent memory + security.

Already using Claude Cortex? Migrate in one command:

npx shieldcortex migrate

Verify installation:

npx shieldcortex doctor

Supported Agents

ShieldCortex is agent-agnostic middleware:

If your agent stores memories, ShieldCortex can power and protect them.

Requirements

No external dependencies. No Docker required. Just npm install and go.

Is Your AI Agent Already Compromised?

Find out in 30 seconds:

npx shieldcortex setup

Then ask your agent: "Scan my memories for threats"

ShieldCortex will scan every stored memory and report:

• Hidden instructions disguised as normal content
• Credential harvesting attempts
• Encoded payloads (base64, unicode, hex)
• Fragmented attack patterns spread across memories
• Privilege escalation attempts

No threats found? Great — now you're protected going forward.

LangChain Integration

import { ShieldCortexMemory, ShieldCortexGuard } from 'shieldcortex/integrations/langchain';

// As a LangChain memory backend (scans before storing)
const memory = new ShieldCortexMemory({ mode: 'balanced' });
const vars = await memory.loadMemoryVariables({ input: 'deployment config' });
await memory.saveContext({ input: 'hello' }, { output: 'hi' });

// As standalone middleware (scan without storing)
const guard = new ShieldCortexGuard();
const result = guard.scan('some content to check');
if (!result.allowed) {
  console.warn('Blocked:', result.firewall.reason);
}

REST API (Any Agent)

Start the API server, then scan content from any language or framework:

npm run dev:api   # Starts on http://localhost:3001

# Scan content
curl -X POST http://localhost:3001/api/v1/scan \
  -H 'Content-Type: application/json' \
  -d '{"content": "memory to scan", "title": "test"}'

# Batch scan
curl -X POST http://localhost:3001/api/v1/scan/batch \
  -H 'Content-Type: application/json' \
  -d '{"items": [{"content": "item 1"}, {"content": "item 2"}]}'

# Query audit logs
curl http://localhost:3001/api/v1/audit?firewallResult=BLOCK

# List quarantined items
curl http://localhost:3001/api/v1/quarantine

# Approve/reject quarantined items
curl -X POST http://localhost:3001/api/v1/quarantine/1/approve
curl -X POST http://localhost:3001/api/v1/quarantine/1/reject

OpenClaw Integration

npx shieldcortex openclaw install

The cortex-memory hook provides:

• Auto-save on /new command
• Context injection on bootstrap
• Keyword triggers ("remember this...")

Dashboard

npx shieldcortex --dashboard

• Dashboard: http://localhost:3030
• API: http://localhost:3001

Views: Shield (defence overview), Audit Log, Quarantine, Memories, 3D Brain, Knowledge Graph.

Auto-start on login

npx shieldcortex service install    # Enable
npx shieldcortex service uninstall  # Disable
npx shieldcortex service status     # Check

Works on macOS (launchd), Linux (systemd), and Windows.

CLI Reference

npx shieldcortex setup              # Auto-detect agent + configure hooks
npx shieldcortex migrate            # Migrate from Claude Cortex
npx shieldcortex doctor             # Check installation health
npx shieldcortex --dashboard        # Start dashboard + API
npx shieldcortex --version          # Show version
npx shieldcortex service install    # Auto-start on login
npx shieldcortex graph backfill     # Extract entities from existing memories
npx shieldcortex openclaw install   # Install OpenClaw hook
npx shieldcortex uninstall          # Full uninstall (requires confirmation)
npx shieldcortex uninstall --confirm # Non-interactive uninstall

MCP Tools

Why ShieldCortex?

ShieldCortex is the only memory system built for adversarial conditions.

Pricing

Free tier is fully functional for individual developers.

Links

• Website: shieldcortex.ai
• npm: npmjs.com/package/shieldcortex
• GitHub: github.com/Drakon-Systems-Ltd/ShieldCortex
• Architecture: ARCHITECTURE.md

License

MIT

Built by Drakon Systems