seanr95/radware-search-guard repository overview

⁠Radware Search Guard for Open WebUI

Inspects Open WebUI web searches with Radware Agentic AI Protection, out-of-path. Every search query, every result and every page the assistant loads is inspected before the model sees it; unsafe results are removed and the user is told, with a Radware Event ID. The connection between Open WebUI and the language model is not touched, and prompts never leave the customer's network.

⁠Install (one command, beside an existing Open WebUI container)

Get install.sh from the release and run it on the Docker host:

sudo bash install.sh

It asks for a Radware out-of-path agent API key, a SerpApi key and an Open WebUI administrator login, starts this image on the network Open WebUI is on, configures Open WebUI's web-search settings through the admin API and proves the path with one real search. Afterwards: install.sh status | test | rotate | upgrade | uninstall.

⁠Run the image directly

docker run -d --name radware-search-guard --restart unless-stopped \
  --network <network-open-webui-is-on> \
  --env-file /etc/radware-search-guard/container.env \
  --read-only --tmpfs /tmp:size=16m,mode=1777 --cap-drop ALL --security-opt no-new-privileges:true \
  seanr95/radware-search-guard:0.3.0

with RADWARE_API_KEY, SERPAPI_API_KEY, SHIM_API_KEY and SEARCH_BACKEND=serpapi in the env file, and Open WebUI's external search URL http://radware-search-guard:8091/search and external loader URL http://radware-search-guard:8091/loader (both API key fields = SHIM_API_KEY). GET /health for liveness, GET /ready for inspection readiness (503 once Radware inspection has failed). Fail-open by default; FAIL_MODE=closed to drop results instead. Honours HTTP_PROXY / HTTPS_PROXY / NO_PROXY and SSL_CERT_FILE.

Runs as an unprivileged user (uid 10001), no runtime dependencies, about 200 MB. Tags: 0.3.0, latest.