Lockdown Mode

A defensive technique for browser agents (Firecrawl, 2026) that restricts the /scrape endpoint to cache-only results. As a result, a URL injected via prompt injection never triggers a live outbound request, which breaks the attack chain: it blocks data exfiltration and command-and-control channels.