NVIDIA NeMo Guardrails

https://docs.nvidia.com/nemo/guardrails/about-nemo-guardrails-library/overview

Open-source Python library for adding programmable guardrails to LLM-based applications and agents. It blocks, alters or validates unsafe, off-topic, malicious or policy-violating user inputs and model responses using configuration files, Colang flows and built-in rails.

Active · Verified 2026-10-29 · fresh as of 2026-10-29 · 17 cited facts, 0 with a third-party source · 1 recorded change · Suggest a correction

At a glance

Type
Framework vendor fix
Tier
T3
Created
2023-04-18 repo fix
Latest release
last commit 2026-10-29 repo fix
License
Apache-2.0 vendor fix
Pricing
searched not found fix
Funding
searched not found fix
Freshness
2026-10-29 fix
Layer
agent-infra repo fix
Licensing
open-source vendor fix
Maturity
beta registry fix
SDK languages
python registry fix

When to use

Optimised for: searched not found

Anti-fit: searched not found

Pros & cons

Pros

searched not found

Cons

searched not found

Claims & capabilities

The NVIDIA NeMo Guardrails library ( PyPI | GitHub ) is an open-source Python package for adding programmable guardrails to LLM-based applications. Use it to block, alter, or validate unsafe, off-topic, malicious, or policy-violating user inputs and model responses.

Technical surface

API surface
searched not found
Backend storage
searched not found
Deployment
searched not found
Embedding model
searched not found
Multi-tenancy
searched not found
MCP
searched not found
A2A
searched not found
OpenTelemetry
yes

Similar systems

Other guardrails & ai security in the catalog, ranked by inbound references.

  • Azure AI Content Safety Prompt Shields T3

    Azure AI Content Safety API that detects user prompt attacks and indirect (document) prompt injection aimed at manipulating a model's behavior, alongside groundedness, protected-material and task-adherence checks.

  • Amazon Bedrock Guardrails T3

    Configurable safeguards that filter harmful text and image content, redact sensitive information, block denied topics and detect hallucinations. They apply consistently across foundation models in Amazon Bedrock and self-hosted or third-party models.

  • Google Cloud Model Armor T3

    Runtime security service that screens AI prompts, responses and agent interactions for prompt injection, jailbreaks, malicious URLs, sensitive-data leaks and harmful content, with adjustable confidence thresholds.

  • CrowdStrike Falcon Guardian (formerly Pangea AI Guard) T3

    AI detection and response product that discovers, governs and secures AI agents at runtime across endpoint, cloud and SaaS. It is built on Pangea, which CrowdStrike agreed to acquire in September 2025, and pangea.cloud's AI Guard page now redirects here.

  • Guardrails AI T3

    Open-source guardrails framework plus the Guardrails Hub of validators that detect policy violations, hallucinations and data leakage in LLM and agent outputs at runtime. Harvey announced its acquisition of Guardrails AI on Sep 8, 2026.

  • Presidio T3

    Open-source framework for detecting, redacting, masking and anonymizing PII in text, images and structured data, commonly used to scrub prompts and responses around LLMs. Originally a Microsoft project, it has transitioned to community ownership under Data Privacy Stack.

Sources (16 cited facts, 0 third-party)

Each fact links to the page it came from; the badge says who published it (how to read sources).

What changed

Changes to this record's lifecycle, licence, release, pricing and hosting facts, from the catalog's git history. Subscribe (Atom)

  1. 2026-10-30 Added to the catalog #347

Related systems

References (12)

  • Calypso AI (now F5 AI Guardrails) integrates with — NeMo Guardrails docs have a F5 AI Guardrails third-party guardrail page. (verified 2026-10-29)
  • Cohere Embed integrates with — NeMo Guardrails docs have a Cohere embeddings provider page. (verified 2026-10-29)
  • CrowdStrike Falcon Guardian (formerly Pangea AI Guard) integrates with — NeMo Guardrails docs have a CrowdStrike AIDR third-party guardrail page. (verified 2026-10-29)
  • Guardrails AI integrates with — NeMo Guardrails docs have a Guardrails AI third-party guardrail page. (verified 2026-10-29)
  • LangChain (framework) integrates with — NeMo Guardrails docs have a LangChain integration page. (verified 2026-10-29)
  • LangGraph (orchestration) integrates with — NeMo Guardrails docs have a LangGraph integration page. (verified 2026-10-29)
  • Meta Llama Protections (Llama Guard, Prompt Guard, LlamaFirewall) integrates with — NeMo Guardrails docs have a Llama Guard third-party guardrail page. (verified 2026-10-29)
  • OpenAI Embeddings integrates with — NeMo Guardrails docs have a OpenAI embeddings provider page. (verified 2026-10-29)
  • Patronus AI integrates with — NeMo Guardrails docs have a Patronus Lynx third-party guardrail page. (verified 2026-10-29)
  • Presidio integrates with — NeMo Guardrails docs have a Presidio third-party guardrail page. (verified 2026-10-29)
  • Prompt Security (SentinelOne) integrates with — NeMo Guardrails docs have a Prompt Security third-party guardrail page. (verified 2026-10-29)
  • Sentence Transformers integrates with — NeMo Guardrails docs have a Sentence Transformers embeddings provider page. (verified 2026-10-29)

Referenced by (1)

  • TrueFoundry AI Gateway integrates with — TrueFoundry AI Gateway ecosystem lists a NVIDIA NeMo Guardrails integration page. (verified 2026-10-29)