Google Cloud Model Armor
https://cloud.google.com/security/products/model-armor
Runtime security service that screens AI prompts, responses and agent interactions for prompt injection, jailbreaks, malicious URLs, sensitive-data leaks and harmful content, with adjustable confidence thresholds.
Active · Verified 2026-10-29 · fresh as of 2026-10-29 · 10 cited facts, 0 with a third-party source · 1 recorded change · Suggest a correction
At a glance
- Tier
- T3
- Section
- Guardrails & AI security
- Created
- searched not found fix
- Latest release
- searched not found fix
- License
- proprietary vendor fix
- GitHub
- not applicable — no GitHub repo fix
- Pricing
- searched not found fix
- Funding
- searched not found fix
- Freshness
- 2026-10-29 fix
- Layer
- agent-infra repo fix
- Licensing
- commercial vendor fix
- SDK languages
- csharp, go, java, php, python, rest, typescript vendor fix
- Compliance
- iso27001, iso27017, iso27018, pci-dss, soc3 vendor fix
When to use
Optimised for: searched not found
Anti-fit: searched not found
Pros & cons
Pros
searched not found
Cons
searched not found
Claims & capabilities
Register today for the Google Cloud Security Summit: Master security at the speed of AI with insights from leading industry voices. November 4, 9-10:30am PST .
Technical surface
- API surface
- searched not found
- Backend storage
- searched not found
- Deployment
- searched not found
- Embedding model
- searched not found
- Multi-tenancy
- searched not found
- MCP
- searched not found
- A2A
- searched not found
- OpenTelemetry
- searched not found
Similar systems
Other guardrails & ai security in the catalog, ranked by inbound references.
- Azure AI Content Safety Prompt Shields T3
Azure AI Content Safety API that detects user prompt attacks and indirect (document) prompt injection aimed at manipulating a model's behavior, alongside groundedness, protected-material and task-adherence checks.
- Amazon Bedrock Guardrails T3
Configurable safeguards that filter harmful text and image content, redact sensitive information, block denied topics and detect hallucinations. They apply consistently across foundation models in Amazon Bedrock and self-hosted or third-party models.
- CrowdStrike Falcon Guardian (formerly Pangea AI Guard) T3
AI detection and response product that discovers, governs and secures AI agents at runtime across endpoint, cloud and SaaS. It is built on Pangea, which CrowdStrike agreed to acquire in September 2025, and pangea.cloud's AI Guard page now redirects here.
- Guardrails AI T3
Open-source guardrails framework plus the Guardrails Hub of validators that detect policy violations, hallucinations and data leakage in LLM and agent outputs at runtime. Harvey announced its acquisition of Guardrails AI on Sep 8, 2026.
- Presidio T3
Open-source framework for detecting, redacting, masking and anonymizing PII in text, images and structured data, commonly used to scrub prompts and responses around LLMs. Originally a Microsoft project, it has transitioned to community ownership under Data Privacy Stack.
- Prompt Security (SentinelOne) T3
AI security platform that controls employee AI tool usage, protects homegrown AI apps and autonomous agents, and redacts sensitive data and enforces policy across AI services. It is now offered by SentinelOne, and prompt.security links to SentinelOne's product page.
Sources (9 cited facts, 0 third-party)
Each fact links to the page it came from; the badge says who published it (how to read sources).
- What it is Product vendor
- What it does & what's distinct Runtime security service that screens AI prompts, responses and agent interactions for p… vendor
- Claims / benefits Register today for the Google Cloud Security Summit: Master security at the speed of AI … vendor
- License proprietary vendor
- Project & sources https://cloud.google.com/security/products/model-armor vendor
- licensing-bucket commercial vendor
- taxonomy-three-layer-rollup agent-infra repo
- compliance-certifications iso27001,iso27017,iso27018,pci-dss,soc3 vendor
- sdk-languages csharp,go,java,php,python,rest,typescript vendor
What changed
Changes to this record's lifecycle, licence, release, pricing and hosting facts, from the catalog's git history. Subscribe (Atom)
- 2026-10-30 Added to the catalog #347
Related systems
References (2)
- LangChain (framework) integrates with — Google Cloud Model Armor docs have an "Integrate with LangChain" page. (verified 2026-10-29)
- Model Context Protocol (MCP spec) integrates with — Model Armor docs have an integration page for Google and Google Cloud MCP servers. (verified 2026-10-29)
Referenced by (5)
- agentgateway integrates with — agentgateway standalone docs have a Google Model Armor prompt-guard page. (verified 2026-10-29)
- Bifrost (Maxim AI) integrates with — Bifrost guardrails integrations include Google Model Armor. (verified 2026-10-29)
- Kong AI Gateway integrates with — Kong has an AI GCP Model Armor plugin. (verified 2026-10-29)
- LiteLLM integrates with — LiteLLM docs have a Google Cloud Model Armor guardrail page. (verified 2026-10-29)
- TrueFoundry AI Gateway integrates with — TrueFoundry AI Gateway ecosystem lists a Google Model Armor integration page. (verified 2026-10-29)