{"id":"lakera-guard-lakera-red--lakera-ai","name":"Lakera Guard / Lakera Red","url":"https://www.lakera.ai/ai-agent-security","page":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/lakera-guard-lakera-red--lakera-ai","family":"memory","section":"Memory governance, privacy & safety","sections":["Memory governance, privacy & safety"],"tier":1,"last_verified_at":"2026-10-29","lifecycle":{"status":"acquired","severity":2,"note":"acquired by Check Point Software"},"taxonomy":{"storage":[{"value":"proprietary","primary":true,"reason":"proprietary threat-intelligence database (80M+ adversarial patterns; growing ~100K/day); not user-memory store"}],"retrieval":[{"value":"injection","primary":true,"reason":null}],"persistence":[{"value":"session","primary":true,"reason":null}],"update":[{"value":"read-only","primary":true,"reason":null}],"unit":[{"value":"attack","primary":true,"reason":"attack pattern / threat signature (per-prompt classification at request time)"}],"governance":[{"value":"auditable","primary":true,"reason":null}],"conflict":[{"value":"n/a","primary":true,"reason":"not applicable (security screening; no memory storage)"}]},"cells":{"type":{"value":"Real-time prompt-injection + poisoning screen","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"desc":{"value":"Acquired by Check Point Software (completed by 2025-11-11); being folded into Check Point's AI security platform. Screens every prompt, response, and retrieved document for indirect prompt injection — primary vector for memory poisoning. Treats memory as untrusted: anything written to or read from memory is adversarial until proven clean. Lakera Red provides \"Agent Breaker\" gamified red-teaming.","citation":"https://cxotoday.com/press-release/check-point-software-technologies-completes-acquisition-of-lakera-to-secure-the-worlds-ai-transformation/","status":"real-data","tier":"T2","source_class":"third-party"},"claims":{"value":"Sub-100ms p99 REST API. Threat model: poisoning, long-horizon goal hijack, cross-session manipulation.","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"modalities":{"value":"text","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"created":{"value":"2021 (founded 2021; Lakera Guard product launched Aug 2023; $10M seed 2023; $20M Series A Jul 2024)","citation":"https://techcrunch.com/2024/07/24/lakera-which-protects-enterprises-from-llm-vulnerabilities-raises-20m/","status":"real-data","tier":"T2","last_verified_at":"2026-05-12","source_class":"third-party"},"latest-release":{"value":"not applicable — not OSS","citation":null,"status":"not-applicable","tier":"T3","last_verified_at":"2026-05-06"},"license":{"value":"not applicable — not OSS","citation":null,"status":"not-applicable","tier":"T3"},"gh":{"value":"not applicable — no GitHub repo","citation":null,"status":"not-applicable","tier":"T3","last_verified_at":"2026-05-06"},"mindshare":{"value":"searched not found","citation":"https://www.lakera.ai/","status":"depth-floor-reached","tier":"T2","last_verified_at":"2026-05-12","source_class":"vendor"},"citations":{"value":"not applicable — not academic","citation":null,"status":"not-applicable","tier":"T3","last_verified_at":"2026-05-12"},"funding":{"value":"acquired by Check Point Software (completed 2025-11; terms undisclosed officially, ~$300M reported)","citation":"https://www.checkpoint.com/press-releases/check-point-acquires-lakera-to-deliver-end-to-end-ai-security-for-enterprises/","status":"real-data","tier":"T2","last_verified_at":"2026-10-22","source_class":"third-party"},"customers":{"value":"searched not found","citation":"https://www.lakera.ai/","status":"depth-floor-reached","tier":"T2","source_class":"vendor"},"pricing":{"value":"Developer: free (10K API calls/mo); Pro: contact sales (higher volume + advanced detection)","citation":"https://platform.lakera.ai/pricing","status":"real-data","tier":"T2","source_class":"vendor"},"compliance":{"value":"SOC 2 (enterprise); Swiss data sovereignty options (Zurich HQ)","citation":"https://www.lakera.ai/","status":"real-data","tier":"T2","source_class":"vendor"},"data-handling":{"value":"SaaS cloud API (default) or self-hosted (Enterprise); sub-100ms screening","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"deployment":{"value":"REST API (SaaS cloud) or self-hosted Enterprise deployment","citation":"https://docs.lakera.ai/docs","status":"real-data","tier":"T2","source_class":"vendor"},"hq":{"value":"Zurich Switzerland + San Francisco CA","citation":"https://www.lakera.ai/about","status":"real-data","tier":"T2","source_class":"vendor"},"founders":{"value":"Lakera AI (David Haber, CEO; Zürich-based; Redpoint Ventures-backed)","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"volume":{"value":"internal — undisclosed (SaaS; real-time screening)","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"perf":{"value":"no public benchmark scores found — vendor does not publish quantitative perf metrics","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"repro":{"value":"not applicable — not a research paper","citation":null,"status":"not-applicable","tier":"T3"},"code-release":{"value":"not applicable — not a research paper","citation":null,"status":"not-applicable","tier":"T3"},"api-surface":{"value":"REST, SDK: Python, JS","citation":"https://www.lakera.ai/","status":"real-data","tier":"T2","source_class":"vendor"},"latency":{"value":"searched not found","citation":"https://www.lakera.ai/","status":"depth-floor-reached","tier":"T2","source_class":"vendor"},"throughput":{"value":"searched not found","citation":"https://www.lakera.ai/","status":"depth-floor-reached","tier":"T2","source_class":"vendor"},"backend-storage":{"value":"custom","citation":"https://www.lakera.ai/","status":"real-data","tier":"T2","source_class":"vendor"},"multi-tenancy":{"value":"hard-isolation","citation":"https://www.lakera.ai/security","status":"real-data","tier":"T2","source_class":"vendor"},"encryption":{"value":"at-rest + in-transit","citation":"https://www.lakera.ai/security","status":"real-data","tier":"T2","source_class":"vendor"},"sso-rbac":{"value":"SSO + RBAC","citation":"https://www.lakera.ai/security","status":"real-data","tier":"T2","source_class":"vendor"},"embedding-model":{"value":"locked","citation":"https://www.lakera.ai/","status":"real-data","tier":"T2","source_class":"vendor"},"consistency":{"value":"not specified — vendor docs do not address this dimension","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"versioning":{"value":"none","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"tombstoning":{"value":"not applicable","citation":null,"status":"not-applicable","tier":"T3"},"schema-evolution":{"value":"not specified — vendor docs do not address this dimension","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"namespace":{"value":"not specified — vendor docs do not address this dimension","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"contradiction":{"value":"not applicable","citation":null,"status":"not-applicable","tier":"T3"},"forgetting":{"value":"not applicable","citation":null,"status":"not-applicable","tier":"T3"},"mcp-support":{"value":"no data — MCP referenced in Lakera blog as a threat-research topic only; no native MCP integration advertised (searched lakera.ai, docs.lakera.ai, lakera.ai/blog)","citation":"https://www.lakera.ai/lakera-guard","status":"depth-floor-reached","tier":"T2","source_class":"vendor"},"a2a-support":{"value":"no data — searched lakera.ai/lakera-guard, docs.lakera.ai, docs.lakera.ai/lakera-guard/integrations; A2A protocol not advertised","citation":"https://www.lakera.ai/lakera-guard","status":"depth-floor-reached","tier":"T2","source_class":"vendor"},"otel":{"value":"no data — searched lakera.ai/lakera-guard, docs.lakera.ai; OpenTelemetry export not advertised","citation":"https://www.lakera.ai/lakera-guard","status":"depth-floor-reached","tier":"T2","source_class":"vendor"},"webhooks":{"value":"webhooks supported (alerts)","citation":"https://docs.lakera.ai/","status":"real-data","tier":"T2","source_class":"vendor"},"import-export":{"value":"JSON via REST (JSON-over-REST; CSV/Parquet export for analytical use)","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"integration-count":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"orchestration":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"programmatic-control":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"vendor-benchmarks":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3","last_verified_at":"2026-05-06"},"pricing-specifics":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"agent-abstraction":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"memory-primitives":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"llm-lock":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"runtimes":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"session-handling":{"value":"not applicable — wrong section","citation":null,"status":"not-applicable","tier":"T3"},"validated-verticals":{"value":"regulated enterprise: financial-services, healthcare, government, legal","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"time-to-running":{"value":"<1day to <1week (enterprise procurement + integration)","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"anti-fit":{"value":"not for hobbyist / non-production use cases","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"optimised-for":{"value":"governance + compliance + audit + adversarial hardening","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"adjacent-infrastructure":{"value":"BYO agent stack; this layer guards it","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"pros":{"value":"Memory-aware guardrail product — Guard for runtime + Red for adversarial testing; covers prompt-injection-into-memory specifically.","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"cons":{"value":"Closed SaaS; rule library is opaque; per-call cost can be meaningful at high volume.","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"links":{"value":"lakera.ai/lakera-guard memory poisoning blog","citation":"https://www.lakera.ai/lakera-guard","status":"real-data","tier":"T2","source_class":"vendor"},"obs-langsmith":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"obs-opentelemetry":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"obs-datadog":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"obs-helicone":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"obs-weave":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"obs-langfuse":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"obs-arize":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"obs-custom":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"cost-token-budget":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"cost-prompt-caching":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"cost-semantic-caching":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"cost-batching":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"cost-model-routing":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"cost-streaming-only":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"cost-observability-cost-attribution":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"eval-langsmith-evals":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"eval-braintrust":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"eval-weights-and-biases-agent":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"eval-helicone-evals":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"eval-custom-test-harness":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"eval-human-loop":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"eval-production-traffic-replay":{"value":"","citation":null,"status":"no-data","tier":"T3","last_verified_at":"2026-05-14"},"commit-trajectory":{"value":"not applicable — no GitHub repo","citation":null,"status":"not-applicable","tier":"T3","last_verified_at":"2026-05-14"},"citation-trajectory":{"value":"not applicable — non-paper row","citation":null,"status":"not-applicable","tier":"T3","last_verified_at":"2026-05-14"},"download-trajectory":{"value":"not applicable — not published as a package","citation":null,"status":"not-applicable","tier":"T3","last_verified_at":"2026-05-14"},"cost-input-usd-per-mtok":{"value":"not applicable — subscription pricing, no per-token cost","citation":"https://platform.lakera.ai/pricing","status":"not-applicable","tier":"T2","source_class":"vendor"},"cost-output-usd-per-mtok":{"value":"not applicable — subscription pricing, no per-token cost","citation":"https://platform.lakera.ai/pricing","status":"not-applicable","tier":"T2","source_class":"vendor"},"cost-tier":{"value":"not applicable — subscription pricing, no per-token cost","citation":"https://platform.lakera.ai/pricing","status":"not-applicable","tier":"T2","source_class":"vendor"},"cost-pricing-model":{"value":"subscription","citation":"https://platform.lakera.ai/pricing","status":"real-data","tier":"T2","source_class":"vendor"},"cost-last-verified":{"value":"2026-06-29","citation":"https://platform.lakera.ai/pricing","status":"real-data","tier":"T2","source_class":"vendor"},"capability-composite-score":{"value":"not applicable — guardrails / red-teaming tool, not a capability-rankable system","citation":null,"status":"not-applicable","tier":"T3"},"capability-band":{"value":"not applicable — guardrails / red-teaming tool, not a capability-rankable system","citation":null,"status":"not-applicable","tier":"T3"},"capability-benchmark-sources":{"value":"not applicable — guardrails / red-teaming tool, not a capability-rankable system","citation":null,"status":"not-applicable","tier":"T3"},"capability-last-verified":{"value":"not applicable — guardrails / red-teaming tool, not a capability-rankable system","citation":null,"status":"not-applicable","tier":"T3"},"use-case-tags":{"value":"not applicable — prompt-injection / poisoning screen, not a memory system","citation":null,"status":"not-applicable","tier":"T3"},"use-case-anti-tags":{"value":"not applicable — prompt-injection / poisoning screen, not a memory system","citation":null,"status":"not-applicable","tier":"T3"},"adoption-accelerator":{"value":"cdl-2022","citation":"https://creativedestructionlab.com/companies/lakera-ai/","status":"real-data","tier":"T2","source_class":"third-party"},"architecture-deployment-locus":{"value":"cloud","citation":"https://platform.lakera.ai/pricing","status":"real-data","tier":"T2","source_class":"vendor"},"licensing-bucket":{"value":"commercial","citation":"https://platform.lakera.ai/pricing","status":"real-data","tier":"T2","source_class":"vendor"},"positioning-platform-vs-product":{"value":"platform","citation":"https://docs.lakera.ai/","status":"real-data","tier":"T2","source_class":"vendor"},"taxonomy-three-layer-rollup":{"value":"agent-infra","citation":"https://github.com/MrPeppersDev/agent-infrastructure-landscape/blob/main/docs/schema/section-to-three-layer-rollup.json","status":"real-data","tier":"T1","source_class":"repo"},"developer-activity-opendigger":{"value":"","citation":null,"status":"no-data","tier":"T3"},"freshness-date":{"value":"2026-10-29","citation":"https://mrpeppersdev.github.io/agent-infrastructure-landscape/systems/lakera-guard-lakera-red--lakera-ai","status":"real-data","tier":"T2","source_class":"catalog"},"compliance-certifications":{"value":"ccpa,gdpr,hipaa,iso27001,soc2-type2","citation":"https://trust.lakera.ai/","status":"real-data","tier":"T2","source_class":"vendor"},"sdk-languages":{"value":"rest","citation":"https://docs.lakera.ai/docs/api","status":"real-data","tier":"T2","source_class":"vendor"},"protocol-support":{"value":"","citation":null,"status":"no-data","tier":"T3"},"maturity":{"value":"","citation":null,"status":"no-data","tier":"T3"}},"corroboration":{"cited_cells":43,"third_party_cells":4},"edges":{"outgoing":[],"incoming":[{"source":"kong-ai-gateway--konghq-com","target":"lakera-guard-lakera-red--lakera-ai","type":"integrates-with","evidence":"Kong has an AI Lakera Guard plugin.","citation":"https://developer.konghq.com/plugins/ai-lakera-guard/","verified_at":"2026-10-29"},{"source":"litellm--gh-berriai-litellm","target":"lakera-guard-lakera-red--lakera-ai","type":"integrates-with","evidence":"LiteLLM proxy docs have a Lakera AI guardrail integration page.","citation":"https://docs.litellm.ai/docs/proxy/guardrails/lakera_ai","verified_at":"2026-10-29"},{"source":"portkey-ai--portkey-ai","target":"lakera-guard-lakera-red--lakera-ai","type":"integrates-with","evidence":"Portkey docs have a Lakera guardrails integration page.","citation":"https://portkey.ai/docs/integrations/guardrails/lakera","verified_at":"2026-10-29"}]},"history":[{"date":"2026-10-29","commit":"a5ff184341","pr":305,"kind":"update","changes":[{"field":"url","label":"Homepage","from":"https://www.lakera.ai/lakera-guard","to":"https://www.lakera.ai/ai-agent-security"}]},{"date":"2026-10-23","commit":"5fd0959f49","pr":223,"kind":"update","changes":[{"field":"pricing","label":"Pricing","from":"Developer: free (10K API calls/mo); Pro: contact sales (higher volume + advanced detection); Enterprise: custom (on…","to":"Developer: free (10K API calls/mo); Pro: contact sales (higher volume + advanced detection)","source":"https://platform.lakera.ai/pricing"}]},{"date":"2026-10-22","commit":"89dcc719ed","pr":195,"kind":"update","changes":[{"field":"funding","label":"Funding / ownership","from":"$30M total ($10M seed Redalpine/Atomico 2023; $20M Series A Jul 2024 Redpoint Ventures + Dropbox VC + Citi Ventures…","to":"acquired by Check Point Software (completed 2025-11; terms undisclosed officially, ~$300M reported)","source":"https://www.checkpoint.com/press-releases/check-point-acquires-lakera-to-deliver-end-to-end-ai-security-for-enterprises/"}]}],"license":"CC-BY-4.0","source":"https://github.com/MrPeppersDev/agent-infrastructure-landscape/blob/main/data/landscape.json"}