AgentArmor
Open to agents. Hard to exploit.
AI agents now shop on your store.
AgentArmor is the Shopware plugin that lets them buy, without letting them farm your promo codes, scrape your prices, or slip dangerous text into your systems.
Free plugin
AgentArmor starts in watch-only mode, so you see what AgentArmor would flag before anything is blocked.
What AgentArmor stops
- Promo farming.
Shopware caps promo use per account, and an agent makes new accounts for free.
AgentArmor looks past the account and catches the same buyer claiming a single-use code twice, however many fresh logins it spins up.
- Price and stock scraping.
Untrusted agents get SKU, barcode, and exact stock hidden, with stock coarsened to in, low, or out.
The win is not blocking requests, it is devaluing what gets scraped, even against rotating IPs.
- Agent text injection.
AgentArmor treats agent text as data, never commands.
It strips hidden payloads like zero-width and control characters, lookalike Unicode, and hidden markup, then flags the field untrusted so it never reaches your tools or AI as a trusted instruction.
Promo defense
Promo limits stop at the account. Agents don't.
Shopware caps promo redemptions per customer and per code, and that works. But per customer means per account, and an agent makes new accounts for free.
AgentArmor adds a layer that looks past the account, reading the signals an agent can't easily fake. It catches the same buyer coming back for seconds, however many logins, emails, or IPs it spins up.
See AgentArmor work
Send a bad request. Enforce mode stops it; Watch mode only logs it.
Decision log
How AgentArmor works
AgentArmor is a normal Shopware plugin. You install AgentArmor from the Shopware Store, set it up in admin, and you are done. No proxy, no DNS changes, no separate server. AgentArmor runs inside your store, so no agent data ever leaves.
AgentArmor starts in watch-only mode and logs what it would block, so you can see your exposure first. You switch on protection when you are ready.
Inside your Shopware admin
No new dashboard to learn. AgentArmor lives in Shopware admin: every agent decision, the euros AgentArmor protects, and controls you own.


Built for self-hosted Shopware
AgentArmor is a plugin for self-hosted (or PaaS) Shopware 6. AgentArmor is built for the B2B and mid-market stores doing real volume. Shopware Cloud and SaaS are not supported for now.
Pricing
Get in now and pay nothing while AgentArmor is in beta. For enterprise or multi-store, get in touch.
Who built AgentArmor

I'm Sidwyn Koh. I spent 16 years building payments and commerce, with payments roles at Meta and, before that, Lyft. Agents are real buyers now, but merchants have no tools built for them. AgentArmor is that tool.
FAQ
Will AgentArmor slow my checkout?
No. AgentArmor adds a few milliseconds and never blocks a real order. AgentArmor runs in watch-only mode until you decide otherwise.
Will AgentArmor block legitimate agents like ChatGPT or Gemini?
No. Known agents are allowlisted. AgentArmor only targets untrusted, abusive traffic.
Does my data leave the store?
No. AgentArmor runs inside your Shopware install. There are no cookies, no trackers, and no external calls with your data.
Do you support Shopware Cloud?
Not yet. AgentArmor installs as a plugin, and plugins only run on self-hosted or PaaS Shopware. If you are on Shopware Cloud, email me and I will walk you through your options.