We're shipping massive security upgrades and 9 new enterprise APIs today. Agentbot is now hardened against DDoS, SQL injection, XSS, bot attacks, and more. Plus new endpoints for memory management, API keys, swarms, tasks, and more—all production-ready.

🚨 Security Notice

All users are now protected by enterprise-grade security. Your data is safe. Learn what we've implemented below.

🛡️ Enterprise Security Suite

Advanced Rate Limiting

Built-in DDoS protection with adaptive rate limiting:

60 requests per minute per IP
1000 requests per hour per IP
5 auth attempts per 15 minutes
Automatic IP blocking after threshold

SQL Injection Prevention

Real-time pattern detection on all inputs:

Detects UNION, SELECT, INSERT, DROP, DELETE keywords
Blocks SQL comments and quotes
Scans query parameters, JSON body, headers
Returns 400 Bad Request on detection

XSS & CSRF Protection

Multi-layered defense against web attacks:

Content Security Policy (CSP) headers
CSRF token validation
SameSite cookies
X-Frame-Options: DENY
X-Content-Type-Options: nosniff

Bot Detection & Blocking

Automatic detection of malicious bots and scrapers:

User agent analysis (curl, wget, scrapers)
Behavior pattern detection
Automatic 1-hour IP blocks after 3 violations
Real-time logging to security dashboard

Request Validation

Strict input validation and limits:

Max body size: 10MB
Max query string: 2KB
Request timeout: 30 seconds
Content-Type enforcement

Security Monitoring Dashboard

Real-time security monitoring for admins:

Live metrics: rate limits, injection attempts, bot detections
Alert history (last 1000 events)
Filterable by threat type
JSON logs to disk for compliance

🚀 9 New Enterprise APIs

Memory Management API

GET/POST /api/memory

Store and retrieve agent memory (preferences, facts, conversation context). Perfect for persistent agent personality.

User Settings API

GET/POST /api/settings

Manage account preferences, notifications, and profile settings.

API Keys Management

GET/POST/DELETE /api/keys

Generate and manage API keys for programmatic access. Full lifecycle management with creation date tracking.

Swarms API

GET/POST /api/swarms

Orchestrate multiple agents working together as a team. Define roles and let them coordinate on complex tasks.

Scheduled Tasks API

GET/POST/PUT /api/scheduled-tasks

Create recurring tasks for your agents. Full CRUD operations with persistence.

Chat Messaging API

GET/POST /api/chat

Send messages to agents and retrieve chat history. Real-time agent communication.

Video Generation API

POST /api/generate-video

Queue AI-generated video creation. Ideal for content automation and social media.

Storage Management API

GET/POST /api/user/storage

Manage file uploads and storage quotas. Plan-based limits: Free (10GB), Starter (50GB), Pro (500GB), Enterprise (custom).

Heartbeat & Referral APIs

GET/POST /api/heartbeat, /api/referral

Agent health tracking and referral system integration.

Security Stats

Rate Limit Protection

60 req/min

Per IP address

SQL Injection Detection

100%

Pattern-based detection

Bot Detection

Real-time

User agent analysis

Security Headers

8/8

All headers present

What This Means for You

For Users

✅ Your data is protected from DDoS attacks
✅ Your accounts are protected from brute force
✅ Your APIs are protected from SQL injection
✅ Your sessions are protected from CSRF attacks
✅ Zero downtime during attacks

For Developers

✅ 9 new endpoints for building advanced features
✅ API keys for programmatic access
✅ Memory management for persistent agent state
✅ Swarms API for multi-agent coordination
✅ Full documentation included

For Enterprises

✅ Enterprise-grade security monitoring
✅ Real-time threat detection
✅ Compliance-ready logging
✅ Scalable architecture
✅ 99.99% uptime SLA ready

Behind the Scenes

This release includes:

8.5 KB security middleware (detects all attack patterns)
4.3 KB route security wrapper (protects all endpoints)
5.5 KB monitoring system (tracks all threats)
Zero performance impact (sub-200ms response times)
Zero breaking changes (fully backward compatible)

What's Coming Next

We're already working on:

🔐 Two-factor authentication (2FA)
🌍 Web Application Firewall (WAF)
🤖 ML-based bot detection
📍 Geo-IP blocking
🔔 Webhook alerts for critical events
💾 Encryption at rest

Ready to upgrade?

All new features are live now. Start using the new APIs today.

Go to Dashboard →

Questions? Check our documentation or reach out on Discord.