Lakera Guard / Lakera Red
https://www.lakera.ai/ai-agent-security
Acquired by Check Point Software (completed by 2025-11-11); being folded into Check Point's AI security platform. Screens every prompt, response, and retrieved document for indirect prompt injection — primary vector for memory poisoning. Treats memory as untrusted: anything written to or read from memory is adversarial until proven clean. Lakera Red provides "Agent Breaker" gamified red-teaming.
Acquired · Verified 2026-10-29 · fresh as of 2026-10-29 · 44 cited facts, 4 with a third-party source · 3 recorded changes · Suggest a correction
At a glance
- Type
- Real-time prompt-injection + poisoning screen vendor fix
- Tier
- T1
- Created
- 2021 (founded 2021; Lakera Guard product launched Aug 2023; $10M seed 2023; $20M Series A Jul 2024) third-party fix
- Latest release
- not applicable — not OSS fix
- License
- not applicable — not OSS fix
- GitHub
- not applicable — no GitHub repo fix
- Pricing
- Developer: free (10K API calls/mo); Pro: contact sales (higher volume + advanced detection) vendor fix
- Funding
- acquired by Check Point Software (completed 2025-11; terms undisclosed officially, ~$300M reported) third-party fix
- Freshness
- 2026-10-29 fix
- Layer
- agent-infra repo fix
- Licensing
- commercial vendor fix
- Compliance
- ccpa, gdpr, hipaa, iso27001, soc2-type2 vendor fix
Memory taxonomy
- storage
- proprietary
- retrieval
- injection
- persistence
- session
- update
- read-only
- unit
- attack
- governance
- auditable
- conflict
- n/a
When to use
Optimised for: governance + compliance + audit + adversarial hardening
Anti-fit: not for hobbyist / non-production use cases
Pros & cons
Pros
Memory-aware guardrail product — Guard for runtime + Red for adversarial testing; covers prompt-injection-into-memory specifically.
Cons
Closed SaaS; rule library is opaque; per-call cost can be meaningful at high volume.
Claims & capabilities
Sub-100ms p99 REST API. Threat model: poisoning, long-horizon goal hijack, cross-session manipulation.
Technical surface
- API surface
- REST, SDK: Python, JS
- Backend storage
- custom
- Deployment
- REST API (SaaS cloud) or self-hosted Enterprise deployment
- Embedding model
- locked
- Multi-tenancy
- hard-isolation
- MCP
- no data — MCP referenced in Lakera blog as a threat-research topic only; no native MCP integration advertised (searched lakera.ai, docs.lakera.ai, lakera.ai/blog)
- A2A
- no data — searched lakera.ai/lakera-guard, docs.lakera.ai, docs.lakera.ai/lakera-guard/integrations; A2A protocol not advertised
- OpenTelemetry
- no data — searched lakera.ai/lakera-guard, docs.lakera.ai; OpenTelemetry export not advertised
Compare Lakera Guard / Lakera Red with…
Alternatives to Lakera Guard / Lakera Red → live options ranked by shared design, licence, hosting and MCP support
Similar systems
Other memory governance, privacy & safety in the catalog, ranked by inbound references.
- Acuvity (now Proofpoint) T1
Acquired by Proofpoint (closed 2026-02-12). Runtime enforcement targeting memory poisoning, unauthorised execution, identity spoofing per the OWASP LLM threat list. Visibility/control over MCP servers and locally-installed AI tools — the infrastructure layer where memory is most exposed.
- Enkrypt AI T1
Applies guardrails at three points: (1) before write to vector DB, (2) before query reaches embedding model, (3) before response. Detects malicious instructions in stored memory before retrieval; scans for PII/PHI in/out. Text + image + voice modalities. Acquired by Anaconda (2026-08-04); Enkrypt AI is now sold as Anaconda's AI security and guardrails product.
- HiddenLayer AISec Platform 2.0 T1
AI security platform with four modules: AI asset discovery, supply-chain/model integrity validation, continuous attack simulation, and runtime detection/response, including protection of agents and MCP-based systems.
- Hyperconsciousness (hc) T3
Developer-alpha encrypted, append-only knowledge store for humans and agents, with CLI/MCP access and scoped, expiring grants. Traction: Submitted via intake issue #181
- Mem0 Security / OpenMemory T1
Commercial Mem0 ships SOC 2 / HIPAA, zero-trust access controls, BYOK encryption, real-time monitoring, audit logs and workspace governance as defaults (Trust Center at trust.mem0.ai). For privacy-first deployments the self-hosted path is now the Mem0 open-source server (REST API + dashboard via Docker Compose with pgvector Postgres, admin setup wizard, per-user API keys, request audit log). As of Oct 2026 OpenMemory itself is a hosted MCP service and its old local Docker variant is no longer in the repo.
- Microsoft Agent Governance Toolkit T2
Cross-Model Verification Kernel (CMVK) requires majority-voting agreement across multiple model calls before a memory-influenced action. Agent OS package intercepts every action (memory included) at sub-millisecond latency. MIT licensed.
Sources (43 cited facts, 4 third-party)
Each fact links to the page it came from; the badge says who published it (how to read sources).
- What it is Real-time prompt-injection + poisoning screen vendor
- What it does & what's distinct Acquired by Check Point Software (completed by 2025-11-11); being folded into Check Poin… third-party
- Claims / benefits Sub-100ms p99 REST API. Threat model: poisoning, long-horizon goal hijack, cross-session… vendor
- Modalities text vendor
- Created 2021 (founded 2021; Lakera Guard product launched Aug 2023; $10M seed 2023; $20M Series … third-party
- Funding acquired by Check Point Software (completed 2025-11; terms undisclosed officially, ~$300… third-party
- Pricing Developer: free (10K API calls/mo); Pro: contact sales (higher volume + advanced detecti… vendor
- Compliance SOC 2 (enterprise); Swiss data sovereignty options (Zurich HQ) vendor
- Data handling SaaS cloud API (default) or self-hosted (Enterprise); sub-100ms screening vendor
- Deployment REST API (SaaS cloud) or self-hosted Enterprise deployment vendor
- HQ Zurich Switzerland + San Francisco CA vendor
- Founders / pedigree Lakera AI (David Haber, CEO; Zürich-based; Redpoint Ventures-backed) vendor
- Memory volume / scale internal — undisclosed (SaaS; real-time screening) vendor
- Performance no public benchmark scores found — vendor does not publish quantitative perf metrics vendor
- API surface REST, SDK: Python, JS vendor
- Backend storage custom vendor
- Multi-tenancy hard-isolation vendor
- Encryption at-rest + in-transit vendor
- SSO / RBAC SSO + RBAC vendor
- Embedding model locked vendor
- Consistency not specified — vendor docs do not address this dimension vendor
- Versioning none vendor
- Schema evolution not specified — vendor docs do not address this dimension vendor
- Namespace primitives not specified — vendor docs do not address this dimension vendor
- Webhooks / events webhooks supported (alerts) vendor
- Import / export JSON via REST (JSON-over-REST; CSV/Parquet export for analytical use) vendor
- Validated verticals regulated enterprise: financial-services, healthcare, government, legal vendor
- Time to running <1day to <1week (enterprise procurement + integration) vendor
- Anti-fit not for hobbyist / non-production use cases vendor
- Optimised for governance + compliance + audit + adversarial hardening vendor
- Adjacent infrastructure BYO agent stack; this layer guards it vendor
- Pros Memory-aware guardrail product — Guard for runtime + Red for adversarial testing; covers… vendor
- Cons Closed SaaS; rule library is opaque; per-call cost can be meaningful at high volume. vendor
- Project & sources lakera.ai/lakera-guard memory poisoning blog vendor
- cost-pricing-model subscription vendor
- cost-last-verified 2026-06-29 vendor
- adoption-accelerator cdl-2022 third-party
- architecture-deployment-locus cloud vendor
- licensing-bucket commercial vendor
- positioning-platform-vs-product platform vendor
- taxonomy-three-layer-rollup agent-infra repo
- compliance-certifications ccpa,gdpr,hipaa,iso27001,soc2-type2 vendor
- sdk-languages rest vendor
What changed
Changes to this record's lifecycle, licence, release, pricing and hosting facts, from the catalog's git history. Subscribe (Atom)
- 2026-10-29
- Homepage “https://www.lakera.ai/lakera-guard” → “https://www.lakera.ai/ai-agent-security”
- 2026-10-23
- Pricing “Developer: free (10K API calls/mo); Pro: contact sales (higher volume + advanced detection); Enterprise: custom (on…” → “Developer: free (10K API calls/mo); Pro: contact sales (higher volume + advanced detection)” source
- 2026-10-22
- Funding / ownership “$30M total ($10M seed Redalpine/Atomico 2023; $20M Series A Jul 2024 Redpoint Ventures + Dropbox VC + Citi Ventures…” → “acquired by Check Point Software (completed 2025-11; terms undisclosed officially, ~$300M reported)” source
Related systems
Referenced by (3)
- Kong AI Gateway integrates with — Kong has an AI Lakera Guard plugin. (verified 2026-10-29)
- LiteLLM integrates with — LiteLLM proxy docs have a Lakera AI guardrail integration page. (verified 2026-10-29)
- Portkey AI integrates with — Portkey docs have a Lakera guardrails integration page. (verified 2026-10-29)