HiddenLayer AI Security Platform
Policy enginehiddenlayer
AI discovery, model scanning, attack simulation and runtime detection and blocking for LLM apps and agents.
- Provider
- default
- Kind
- Policy engine
- Category
- Operations
- Also known as
- HiddenLayer AISec Platform, AIDR
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| action | enum | detect | redact | block | no | — | inherited |
| effect | enum | audit | deny | modify | deploy-if-not-exists | no | — | inherited |
| enforcementMode | enum | enforced | disabled | no | — | inherited |
| managed | boolean | — | no | false | ▸ false |
| modelScanning | boolean | — | no | false | inherited |
| policyCount | integer | — | no | — | inherited |
| remediation | boolean | — | no | false | inherited |
| runtimeVersion | enum | agentic-runtime-security | aidr | no | agentic-runtime-security | inherited |
| scope | enum | resource | group | account | organization | no | — | ▸ resource |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "hiddenlayer", component: "hiddenlayer" }Cloud Configalibaba-cloud-configData Security Centeralibaba-data-security-centerAmazon CodeGuru Revieweraws-codeguru-reviewerAWS Configaws-configAWS Control Toweraws-control-towerIAM Access Analyzeraws-iam-access-analyzerAWS Lake Formationaws-lake-formationAWS License Manageraws-license-managerAWS Organizationsaws-organizationsAWS Resource Access Manageraws-ramAmazon Verified Permissionsaws-verified-permissionsMicrosoft Entra Conditional Accessazure-conditional-accessAzure Policyazure-policyMicrosoft Entra Privileged Identity Managementazure-privileged-identity-managementCloudflare Data Loss Preventioncloudflare-dlpCalypsoAIcalypsoaiCerboscerbosOPA GatekeepergatekeeperGuardrails AIguardrails-aiKubeArmorkubearmorKubewardenkubewardenKyvernokyvernoLakera Guardlakera-guardLLM Guardllm-guardNeMo Guardrailsnemo-guardrailsOpen Policy AgentopaPermit.iopermit-ioGeneric policy enginepolicy-enginePrompt Securityprompt-securityProtect AIprotect-aiRebuffrebuffRobust Intelligencerobust-intelligenceSonarQube ServersonarqubeDigitalOcean CSPMdigitalocean-cspmAccess Context Managergoogle-access-context-managerAssured Workloadsgoogle-assured-workloadsBinary Authorizationgoogle-binary-authorizationIdentity and Access Managementgoogle-cloud-iamFirebase App Checkgoogle-firebase-app-checkModel Armorgoogle-model-armor
and 16 more → Policy engine page# yaml-language-server: $schema=../../schema/component.schema.json # HiddenLayer AI Security Platform: AI discovery, supply-chain model scanning, attack simulation and AI # Runtime Security for LLM apps and agents. Per "AI Runtime Security Overview", the runtime monitors model # inputs and outputs and can detect, redact or block; it runs as containers in your own cloud or self-hosted # Kubernetes, and Agentic Runtime Security is the recommended version over the earlier AIDR. schemaVersion: "1" type: "component" id: "hiddenlayer" kind: "policy-engine" provider: "default" docs: "https://docs.hiddenlayer.ai/docs/products/runtime/overview" aliases: ["HiddenLayer AISec Platform", "AIDR"] defaults: managed: false scope: "resource" properties: runtimeVersion: type: "enum" values: ["agentic-runtime-security", "aidr"] default: "agentic-runtime-security" action: type: "enum" values: ["detect", "redact", "block"] modelScanning: type: "boolean" default: false