Guardrails & AI security
12 systems in the guardrails & ai security category of the AI Agent Infrastructure Landscape, grouped by maturity tier.
Tier 3 — emerging (12)
- Amazon Bedrock Guardrails Product
Configurable safeguards that filter harmful text and image content, redact sensitive information, block denied topics and detect hallucinations. They apply consistently across foundation models in Amazon Bedrock and self-hosted or third-…
- Arthur Engine Framework
Open-source service from Arthur AI for enforcing guardrails in LLM and agent workflows, with real-time detection of PII leakage, hallucination, prompt injection and toxicity. It also provides trace-based evaluation and observability for …
- Azure AI Content Safety Prompt Shields Product
Azure AI Content Safety API that detects user prompt attacks and indirect (document) prompt injection aimed at manipulating a model's behavior, alongside groundedness, protected-material and task-adherence checks.
- CrowdStrike Falcon Guardian (formerly Pangea AI Guard) Product
AI detection and response product that discovers, governs and secures AI agents at runtime across endpoint, cloud and SaaS. It is built on Pangea, which CrowdStrike agreed to acquire in September 2025, and pangea.cloud's AI Guard page no…
- Google Cloud Model Armor Product
Runtime security service that screens AI prompts, responses and agent interactions for prompt injection, jailbreaks, malicious URLs, sensitive-data leaks and harmful content, with adjustable confidence thresholds.
- Guardrails AI Framework
Open-source guardrails framework plus the Guardrails Hub of validators that detect policy violations, hallucinations and data leakage in LLM and agent outputs at runtime. Harvey announced its acquisition of Guardrails AI on Sep 8, 2026.
- Invariant Guardrails Framework
Contextual guardrailing layer for agentic and MCP applications that sits at the LLM and MCP level. It enforces deterministic rules over tool calls, data flow, secrets, PII, code and loops.
- Meta Llama Protections (Llama Guard, Prompt Guard, LlamaFirewall) Framework
Meta's open system-level safeguards from the Purple Llama project: Llama Guard content-moderation classifiers, Prompt Guard prompt-injection and jailbreak detectors, Code Shield insecure-code filtering, and LlamaFirewall, a scanner frame…
- NVIDIA NeMo Guardrails Framework
Open-source Python library for adding programmable guardrails to LLM-based applications and agents. It blocks, alters or validates unsafe, off-topic, malicious or policy-violating user inputs and model responses using configuration files…
- Presidio Framework
Open-source framework for detecting, redacting, masking and anonymizing PII in text, images and structured data, commonly used to scrub prompts and responses around LLMs. Originally a Microsoft project, it has transitioned to community o…
- Prompt Security (SentinelOne) Product
AI security platform that controls employee AI tool usage, protects homegrown AI apps and autonomous agents, and redacts sensitive data and enforces policy across AI services. It is now offered by SentinelOne, and prompt.security links t…
- PyRIT Framework
Microsoft's Python Risk Identification Tool, an open framework for automated and human-led red teaming of generative AI systems. It runs multi-turn attack strategies such as Crescendo and TAP against any model or HTTP target.