What is Agent Egress Sentinel?

Agent Egress Sentinel is an autonomous network sniffer and visual radar that captures, classifies, and audits all domains, IP addresses, and endpoints contacted by AI agents and LLM runtimes in real time.

Does it require installing root CA certificates?

No. Sentinel uses an in-memory TLS ClientHello SNI extractor that inspects standard HTTPS handshakes without breaking encryption or creating certificate installation friction.

Can I enforce zero-egress or block telemetry?

Yes. Sentinel includes a built-in Rules Engine supporting allow_all, block_telemetry, zero_egress local isolation, and custom allowlist/blocklists.

Agent Egress Sentinel — AI Network Traffic Sniffer & Endpoint Monitor

Total Requests

Egress packet stream

Unique Domains

Discovered destinations

Data Transferred

0 B

Sent & received total

Avg Latency

0ms

Roundtrip duration

Quarantined

Blocked by policy

Policy:

EGRESS VECTOR RADAR

Proxy: 127.0.0.1:8096

LLM APIs

Model Hubs

Telemetry

Search/Scrapers

Local / Sandboxed

CONTACTED DOMAINS

Click a domain to isolate its traffic packets below:

ZERO-DEPENDENCY CORE:

• Pure Python Standard Library
• In-Memory TLS ClientHello SNI sniffer
• Linux /proc socket descriptor audit

Live Egress Traffic Stream

Real-time packet inspection for AI agent requests and tunnels.

Time	Agent	Destination Domain	Protocol / Method	Throughput	Latency	Action
Listening for agent traffic on proxy port 8096... Run an agent or simulate traffic above.

🛡️ KERNEL EGRESS QUARANTINE & DEEP PACKET REPLAY VAULT

Autonomous in-kernel TCP RST injection, full-payload hex disassembler, and continuous HAR 1.2 streaming.

LIVE KERNEL SOCKET STREAM [/proc/net/tcp]:

00000000: 4500 003c 1a2b 4000 4006 e12a 7f00 0001 E..<+@.@..*....

00000010: 7f00 0001 9c40 1f92 0000 0000 0000 0000 .....@..........

00000020: a002 7210 9f12 0000 0204 05b4 0402 080a ..r.............

00000030: 023f b412 0000 0000 0103 0307 [SNI: api.openai.com] QUARANTINE_ARMED

EXFILTRATION COUNTERMEASURES:

✓ TCP Reset on unverified outbound TLS
✓ In-Memory TLS 1.3 ClientHello Decoder
✓ Telemetry Deflector (Segment / PostHog)
✓ Multi-Agent Session HAR 1.2 Export

🛡️

PRO FEATURE: KERNEL EGRESS QUARANTINE

Lock down outbound network exfiltration, stream continuous multi-agent HAR traces, and inject automated TCP resets on unauthorized telemetry.

$79 Regular $19 Lifetime Founding Access

💳 Instant Unlock via Stripe ($19) 🟣 Pay with Solana (DePay)

Live Egress Traffic Stream

🛡️ KERNEL EGRESS QUARANTINE & DEEP PACKET REPLAY VAULT

PRO FEATURE: KERNEL EGRESS QUARANTINE

UNLOCK SENTINEL PRO