If you believe you have found a security issue in this integration (the provisioning script, the validators, or the documentation), please report it privately. Do not open a public GitHub issue for security reports.

• Report it through Radware's official support channel (support.radware.com) or your Radware account team, and ask that it reach Radware Product Security.
• Please include the affected file or script, a description, and steps to reproduce.

We will acknowledge your report, investigate, and keep you informed of the fix.

This repository is the integration between Databricks and Radware Agentic AI Protection. The detection engine and every enforcement decision live in the Radware service; Databricks is protected through native configuration (an external model serving endpoint). Findings in the scripts or the docs are in scope.

The integration is designed so your sk-rdwr-... key is never exposed:

• Store the key in a Databricks secret scope and reference it from the serving endpoint as {{secrets/radware/in_path_api_key}}. Databricks resolves the reference at request time; the key is not returned in the endpoint config.
• scripts/provision_radware_endpoint.py sends the key only to the Databricks secrets API and never prints it.
• Never commit a real key. No sk-rdwr-... value belongs in source, screenshots, or issues.
• Rotation is zero-downtime: update the secret value (POST /api/2.0/secrets/put) and the very next request uses the new key - no endpoint change or restart required.

The integration is configuration plus helper scripts; the latest state of the default branch is the supported version.