We're shipping massive security upgrades and 9 new enterprise APIs today. Agentbot is now hardened against DDoS, SQL injection, XSS, bot attacks, and more. Plus new endpoints for memory management, API keys, swarms, tasks, and more—all production-ready.

Security Notice

All users are now protected by enterprise-grade security. Your data is safe. Learn what we've implemented below.

Enterprise Security Suite

Advanced Rate Limiting

Built-in DDoS protection with adaptive rate limiting:

60 requests per minute per IP
1000 requests per hour per IP
5 auth attempts per 15 minutes
Automatic IP blocking after threshold

SQL Injection Prevention

Real-time pattern detection on all inputs:

Detects UNION, SELECT, INSERT, DROP, DELETE keywords
Blocks SQL comments and quotes
Scans query parameters, JSON body, headers
Returns 400 Bad Request on detection

XSS & CSRF Protection

Multi-layered defense against web attacks:

Content Security Policy (CSP) headers
CSRF token validation
SameSite cookies
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Bot Detection & Blocking

Automatic detection of malicious bots and scrapers:

User agent analysis (curl, wget, scrapers)
Behavior pattern detection
Automatic 1-hour IP blocks after 3 violations
Real-time logging to security dashboard

Request Validation

Strict input validation and limits:

Max body size: 10MB
Max query string: 2KB
Request timeout: 30 seconds
Content-Type enforcement

Security Monitoring Dashboard

Real-time security monitoring for admins:

Live metrics: rate limits, injection attempts, bot detections
Alert history (last 1000 events)
Filterable by threat type
JSON logs to disk for compliance

9 New Enterprise APIs

Memory Management API

GET/POST /api/memory

Store and retrieve agent memory (preferences, facts, conversation context). Perfect for persistent agent personality.

User Settings API

GET/POST /api/settings

Manage account preferences, notifications, and profile settings.

API Keys Management

GET/POST/DELETE /api/keys

Generate and manage API keys for programmatic access. Full lifecycle management with creation date tracking.

Swarms API

GET/POST /api/swarms

Orchestrate multiple agents working together as a team. Define roles and let them coordinate on complex tasks.

Scheduled Tasks API

GET/POST/PUT /api/scheduled-tasks

Create recurring tasks for your agents. Full CRUD operations with persistence.

Chat Messaging API

GET/POST /api/chat

Send messages to agents and retrieve chat history. Real-time agent communication.

Video Generation API

POST /api/generate-video

Queue AI-generated video creation. Ideal for content automation and social media.

Storage Management API

GET/POST /api/user/storage

Manage file uploads and storage quotas. Plan-based limits: Free (10GB), Starter (50GB), Pro (500GB), Enterprise (custom).

Heartbeat & Referral APIs

GET/POST /api/heartbeat, /api/referral

Agent health tracking and referral system integration.

Security Stats

Rate Limit Protection

60 req/min

Per IP address

SQL Injection Detection

100%

Pattern-based detection

Bot Detection

Real-time

User agent analysis

Security Headers

8/8

All headers present

What This Means for You

For Users

Your data is protected from DDoS attacks
Your accounts are protected from brute force
Your APIs are protected from SQL injection
Your sessions are protected from CSRF attacks
Zero downtime during attacks

For Developers

9 new endpoints for building advanced features
API keys for programmatic access
Memory management for persistent agent state
Swarms API for multi-agent coordination
Full documentation included

For Enterprises

Enterprise-grade security monitoring
Real-time threat detection
Compliance-ready logging
Scalable architecture
99.99% uptime SLA ready

Behind the Scenes

This release includes:

8.5 KB security middleware (detects all attack patterns)
4.3 KB route security wrapper (protects all endpoints)
5.5 KB monitoring system (tracks all threats)
Zero performance impact (sub-200ms response times)
Zero breaking changes (fully backward compatible)

What's Coming Next

We're already working on:

Two-factor authentication (2FA)
Web Application Firewall (WAF)
ML-based bot detection
Geo-IP blocking
Webhook alerts for critical events
Encryption at rest

Ready to upgrade?

All new features are live now. Start using the new APIs today.

Go to Dashboard →

Questions? Check our documentation or reach out on Discord.