Golf

In plain words

Golf Firewall is a security layer designed for enterprises that expose MCP servers. It protects these servers from malicious requests and data breaches by blocking prompt injections, personally identifiable information leaks, and credential exposure before they reach customer agents. The product is built for companies operating MCP infrastructure who need to safeguard sensitive data and maintain server integrity against security threats.

written from the facts on this page · September 2026

From the sources

Golf Firewall is the security layer for companies exposing MCP servers. It protects your MCP server from serving malicious or sensitive data - blocking prompt injections, PII leaks, and credential exposure before they reach customer agents.

Your teams connect Cursor, Claude Code, and Copilot to production via MCP. These connections bypass your SIEM, DLP, and identity layer. Golf discovers every one of them. It reads customer records, deal pipelines, and contact lists via MCP. It can update fields, create records, export data. Your security team was never notified — because the engineer set it up in 30 seconds. Someone connected it via MCP. It's closing issues, changing priorities, reassigning work across your org. No one approved it. No one's reviewing what it does. It injects hidden instructions into tool responses. Your agent follows them - exfiltrating data, modifying records, escalating permissions. It looks normal. Your…from golf.dev

• 
  BunkerWeb – The Open-Source Web Application Firewall (WAF)2024 · github.com · ▲120

  🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb

• 
  BunkerWeb – the open-source and cloud-native WAF2025 · docs.bunkerweb.io · ▲106

  Documentation of BunkerWeb, the open source and next generation WAF.

• 
  MCP-Shield – Detect security issues in MCP servers2025 · github.com · ▲134

  I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…

• 
  FireWallyDec 2025 · apps.apple.com · ▲156

  A free Mac firewall powered by Apple Intelligence

• 
  Permit MCP GatewayMar 2026 · permit.io · ▲134

  Hi HN, Gabriel, Co-Founder at Permit.io. We're releasing Permit MCP Gateway today, an authorization proxy for MCP servers. TL;DR - we built an MCP Gateway that developers love and CISOs trust. Watch more[0] Now, after your little hate on using fancy copy on HN, to the real thing: MCP is in a strange place. Developers are debating whether it's overcomplicated compared to CLIs or skills files. Meanwhile, enterprises are adopting it by default because every agentic system that acts on your behalf, Cursor, Claude, Copilot, internal agents, needs a stable infrastructure for connecting to tools.…

• 
  ContextGuard2025 · github.com · ▲12

  I built ContextGuard after discovering that 43% of MCP servers have critical security vulnerabilities. MCP (Model Context Protocol) is the new standard that lets Claude Clients(Desktop, Windsurf, Cursor, etc.) access external tools and data sources - think of it as a plugin system for AI assistants. The problem: When you give those clients access to your filesystem, databases, or APIs through MCP servers, you're opening up serious attack vectors. Prompt injection, data leakage, and path traversal attacks are all possible. Most developers building MCP servers don't have security expertise,…

• 
  Spira Maxima▲578

  Video model that turns script into viral social media videos

  AI · 17d ago · spira.ai

• 
  Rill Browser▲540

  The browser where Claude Code and Codex work beside you

  AI · 17d ago · rill.love

• 
  Germany's new sovereign AI model Kolibri▲424

  Kolibri is Aleph Alpha

  AI · 18d ago · tej.as

• 
  Giving Opus 5.5 a simulated paint canvas▲392

  Paintings by AI models: programs run through a simulation of oil paint.

  AI · 20d ago · stillwet.art

• 
  Onepin▲384

  AI voiceover with every name, price and date said right

  AI · 30d ago · onepin.ai

• 
  PixVerse R2▲381

  A real-time world model you can explore and change

  AI · 29d ago · world.pixverse.video

• 
  Guideflow▲1,338

  Create interactive product demos and step-by-step guides in seconds with Guideflow, the leading AI-powered demo automation tool.

  AI · Nov 2025 · guideflow.com

• 
  I built a synth for my daughter▲1,278

  Hardware and software projects by Ali Roberts

  Life & fun · Nov 2025 · bitsnpieces.dev

• 
  Welltory▲1,028

  Measure your wellness. Use data to feel great every day.

  Work · Nov 2025 · welltory.com

• 
  Gemini 3▲1,016

  Bring any idea to life with multimodal capabilities

  AI · Nov 2025 · blog.google

• 
  TrustMRR▲833

  LLM Gateway is a b2b artificial intelligence based in United States, founded in 2025. $259,539/month in verified Stripe revenue. $78,764 MRR. Ahrefs Domain Rating 52/100. growing 55% month-over-month. Track LLM Gateway's verified metrics on TrustMRR.

  Growth · Nov 2025 · trustmrr.com

• 
  Boing▲782

  Life & fun · Nov 2025 · boing.greg.technology