Meta Llama Protections (Llama Guard, Prompt Guard, LlamaFirewall)
https://dev.meta.ai/llama/llama-protections
Meta's open system-level safeguards from the Purple Llama project: Llama Guard content-moderation classifiers, Prompt Guard prompt-injection and jailbreak detectors, Code Shield insecure-code filtering, and LlamaFirewall, a scanner framework for securing multi-step agentic operations.
Active · Verified 2026-10-29 · fresh as of 2026-10-29 · 13 cited facts, 0 with a third-party source · 1 recorded change · Suggest a correction
At a glance
- Tier
- T3
- Section
- Guardrails & AI security
- Created
- 2023-12-06 repo fix
- Latest release
- last commit 2026-10-12 repo fix
- License
- Llama 3.2 Community License (Llama Guard / Prompt Guard models); LlamaFirewall and Code Shield MIT vendor fix
- GitHub
- https://github.com/meta-llama/PurpleLlama (4450★) repo fix
- Pricing
- searched not found fix
- Funding
- searched not found fix
- Freshness
- 2026-10-29 fix
- Layer
- agent-infra repo fix
- Licensing
- open-source vendor fix
When to use
Optimised for: searched not found
Anti-fit: searched not found
Pros & cons
Pros
searched not found
Cons
searched not found
Claims & capabilities
Llama Protections models and tools embrace both offensive and defensive strategies.
Technical surface
- API surface
- searched not found
- Backend storage
- searched not found
- Deployment
- searched not found
- Embedding model
- searched not found
- Multi-tenancy
- searched not found
- MCP
- searched not found
- A2A
- searched not found
- OpenTelemetry
- searched not found
Similar systems
Other guardrails & ai security in the catalog, ranked by inbound references.
- Azure AI Content Safety Prompt Shields T3
Azure AI Content Safety API that detects user prompt attacks and indirect (document) prompt injection aimed at manipulating a model's behavior, alongside groundedness, protected-material and task-adherence checks.
- Amazon Bedrock Guardrails T3
Configurable safeguards that filter harmful text and image content, redact sensitive information, block denied topics and detect hallucinations. They apply consistently across foundation models in Amazon Bedrock and self-hosted or third-party models.
- Google Cloud Model Armor T3
Runtime security service that screens AI prompts, responses and agent interactions for prompt injection, jailbreaks, malicious URLs, sensitive-data leaks and harmful content, with adjustable confidence thresholds.
- CrowdStrike Falcon Guardian (formerly Pangea AI Guard) T3
AI detection and response product that discovers, governs and secures AI agents at runtime across endpoint, cloud and SaaS. It is built on Pangea, which CrowdStrike agreed to acquire in September 2025, and pangea.cloud's AI Guard page now redirects here.
- Guardrails AI T3
Open-source guardrails framework plus the Guardrails Hub of validators that detect policy violations, hallucinations and data leakage in LLM and agent outputs at runtime. Harvey announced its acquisition of Guardrails AI on Sep 8, 2026.
- Presidio T3
Open-source framework for detecting, redacting, masking and anonymizing PII in text, images and structured data, commonly used to scrub prompts and responses around LLMs. Originally a Microsoft project, it has transitioned to community ownership under Data Privacy Stack.
Sources (12 cited facts, 0 third-party)
Each fact links to the page it came from; the badge says who published it (how to read sources).
- What it is Framework vendor
- What it does & what's distinct Meta's open system-level safeguards from the Purple Llama project: Llama Guard content-m… vendor
- Claims / benefits Llama Protections models and tools embrace both offensive and defensive strategies. vendor
- Created 2023-12-06 repo
- Latest release last commit 2026-10-12 repo
- License Llama 3.2 Community License (Llama Guard / Prompt Guard models); LlamaFirewall and Code … vendor
- GitHub https://github.com/meta-llama/PurpleLlama (4450★) repo
- Mindshare 4450 GitHub stars repo
- Project & sources https://dev.meta.ai/llama/llama-protections ; https://github.com/meta-llama/PurpleLlama vendor
- licensing-bucket open-source vendor
- taxonomy-three-layer-rollup agent-infra repo
- sdk-languages python registry
What changed
Changes to this record's lifecycle, licence, release, pricing and hosting facts, from the catalog's git history. Subscribe (Atom)
- 2026-10-30 Added to the catalog #347
Related systems
Referenced by (1)
- NVIDIA NeMo Guardrails integrates with — NeMo Guardrails docs have a Llama Guard third-party guardrail page. (verified 2026-10-29)