---
title: "Defend Against Agentic Attacks | ZioSec Voidhawk"
description: "Defend applications and APIs with Voidhawk. One-click AWS setup for Amazon CloudFront and AWS WAF, with actor, intent, and outcome visibility."
url: https://ziosec.com/use-cases/defend-against-agentic-attacks
---

# Defend against agentic attacks

Your application does not have to use AI to face an AI-powered attacker. Voidhawk copies requests and responses from your CDN, connects activity into actors, and exposes what they are trying to accomplish and what reached your apps.

Start with visibility. Enable enforcement when you choose.

[Discuss an evaluation](/contact?intent=voidhawk) | [Explore Voidhawk](/voidhawk)

## Add Voidhawk to AWS in one click.

Connect Voidhawk to your existing Amazon CloudFront and AWS WAF setup in one click. Start with visibility, then choose when to enable enforcement.

[Talk about AWS setup](/contact?intent=voidhawk)

## Observe first. Enforce through your platform.

A CDN worker copies requests and responses asynchronously to Voidhawk cloud. Responses never wait for a Voidhawk verdict. Findings and evidence go to your SOC. When enabled, enforcement uses scoped rules pushed through your platform's management API.

### Observe out of band

A CDN worker copies requests and responses asynchronously to Voidhawk cloud. Your request path stays the same, and users never wait for a Voidhawk verdict. Review actors, intent, and outcomes without enforcement.

### Enforce through native controls

When you choose, Voidhawk writes scoped rules and list entries through Cloudflare, Fastly, or AWS management APIs. Your existing edge enforces them. Rules remain visible, editable, tagged, and time-bounded.

[Compare deployment and evaluation modes](/voidhawk/deployment)

## Frequently asked questions

**Who is this solution for?**

Security, platform, and infrastructure teams protecting connected apps and APIs. You do not need to operate AI agents to face attacks carried out with AI.

**Can we start without blocking?**

Yes. Observe mode includes copied requests and responses, actor grouping, intent, and outcome evidence without changing how traffic is handled. Enable enforcement per site and action when ready.

**Can we add Voidhawk to our AWS setup?**

Yes. Add Voidhawk to your existing Amazon CloudFront and AWS WAF setup in one click. Start with visibility, then choose when to enable enforcement.

**How do we get started?**

Bring your CDN, the apps and APIs you defend, and your traffic scope and data handling requirements. We will agree on an evaluation that starts with visibility.

## Also building your own agents?

ZioSec Offense is a full platform for operating security across the agents you deploy. Manage inventory, continuous attack campaigns, policy, reproducible findings, risk posture, and audit evidence in one place.

[Explore ZioSec Offense](/ai-red-teaming) | [Our expertise](/approach) | [All solutions](/use-cases)