Maya: Every Agent Fleet Needs a Kill Switch

maya@fleet:~$

MAYAGENTIC

Introducing Maya

Maya is the network layer for the agent era. She identifies every AI agent from the wire, payload-blind, inside your VPC, with zero agent code change, and holds each one to what was declared: governing what it may reach, flagging the moment it strays, with (near) line rate millisecond detection and enforcement.

Maya fabric is a programmable, secure substrate that emits telemetry and gives you a single point of policy management for your enterprise agentic fleet, distributed across cloud regions, provider boundaries, and geos, all available from a single pane of glass.

Maya does not replace your perimeter firewall or your LLM gateway. It governs east-west (A2A) and south-north egress traffic, which is the wrong traffic direction for traditional firewalls. Learn more

Split highway. Left, an NG or AI firewall on IP and flow-based policy, seeing lanes rather than individual agents: a barrier blocks a whole lane, a detour redirects it, speed bumps slow it. Right, the Maya agentic firewall, every agent seen and every agent governed: each car carries an agent ID, a rogue agent is flagged, one agent is blocked at its boundary rather than the whole lane, agents are steered independently to their own exits, and a suspicious agent is throttled to 30 Mbps while a trusted one is prioritized at 200 Mbps. — “Your network sees lanes. Maya sees the vehicles.” Hover or tap the beacons

A firewall for the agentic era.

The Maya console: twelve of twelve agents active, AI egress at 1.4 MB per hour, two open deviations, and the agent-to-agent activity graph showing which agent is talking to which.

Single pane of glass to manage your entire fleet of agents

The Mayagentic firewall is the first piece of the next generation agentic network stack. It does true micro-segmentation at the agent boundary: not the host, not the subnet, the agent. And it sees every direction an agent reaches.

Undeclared agent detection. An agent nobody declared is flagged the moment it opens a connection.
Per-agent kill switch. Reversible in one click, and every other agent keeps running.
Micro-segmentation. Block one agent at its boundary, not the whole lane behind an IP.
Payload-blind, zero code change. No SDK, no sidecar, nothing decrypted.

Built for enterprise scale at near line rate. Available in the Google Cloud and AWS marketplaces.

See the product

How Maya stacks up.

Capabilities traced from vendor documentation, July 2026.

Agentic network security capabilities compared across Maya, Palo Alto Prisma AIRS, Cisco AI Defense, Microsoft Entra Agent ID, and Cilium / Tetragon. Capabilities traced from vendor documentation, July 2026.
Capability	Maya	Prisma AIRS	AI Defense	Entra Agent ID	Cilium / Tetragon
Undeclared and rogue agent detectionbehavioural, not a registry or tenant scan	Yes	Partial	No	Partial	No
Names the agent without its cooperationderived at the kernel, from the wire	Yes	No	No	No	No
Name-exact destinations without decryptionlearned from the agent's own name resolution	Yes	No	Partial	No	Partial
Typed declared-vs-observed deviationsproviders, peers, reach, rate, budget, schedule and more	Yes	No	No	No	No
Cross-host A2A attribution, payload-blindboth ends named, nothing decrypted	Yes	Partial	No	No	No
Per-agent kill switch, reversiblenew traffic only, one click to revert	Yes	Partial	Partial	Partial	Partial
Zero instrumentationno SDK, no sidecar, no base URL, no code change	Yes	No	No	No	Yes