LLM Guard
Policy enginellm-guard
Open-source toolkit of prompt and output scanners for injection, toxicity, secrets and sensitive data.
- Provider
- default
- Kind
- Policy engine
- Category
- Operations
- Official docs
- https://github.com/protectai/llm-guard
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| apiServer | boolean | — | no | false | inherited |
| effect | enum | audit | deny | modify | deploy-if-not-exists | no | — | inherited |
| enforcementMode | enum | enforced | disabled | no | — | inherited |
| inputScanners | boolean | — | no | false | inherited |
| managed | boolean | — | no | false | ▸ false |
| outputScanners | boolean | — | no | false | inherited |
| policyCount | integer | — | no | — | inherited |
| remediation | boolean | — | no | false | inherited |
| scope | enum | resource | group | account | organization | no | — | ▸ resource |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "llm-guard", component: "llm-guard" }Cloud Configalibaba-cloud-configData Security Centeralibaba-data-security-centerAmazon CodeGuru Revieweraws-codeguru-reviewerAWS Configaws-configAWS Control Toweraws-control-towerIAM Access Analyzeraws-iam-access-analyzerAWS Lake Formationaws-lake-formationAWS License Manageraws-license-managerAWS Organizationsaws-organizationsAWS Resource Access Manageraws-ramAmazon Verified Permissionsaws-verified-permissionsMicrosoft Entra Conditional Accessazure-conditional-accessAzure Policyazure-policyMicrosoft Entra Privileged Identity Managementazure-privileged-identity-managementCloudflare Data Loss Preventioncloudflare-dlpCalypsoAIcalypsoaiCerboscerbosOPA GatekeepergatekeeperGuardrails AIguardrails-aiHiddenLayer AI Security PlatformhiddenlayerKubeArmorkubearmorKubewardenkubewardenKyvernokyvernoLakera Guardlakera-guardNeMo Guardrailsnemo-guardrailsOpen Policy AgentopaPermit.iopermit-ioGeneric policy enginepolicy-enginePrompt Securityprompt-securityProtect AIprotect-aiRebuffrebuffRobust Intelligencerobust-intelligenceSonarQube ServersonarqubeDigitalOcean CSPMdigitalocean-cspmAccess Context Managergoogle-access-context-managerAssured Workloadsgoogle-assured-workloadsBinary Authorizationgoogle-binary-authorizationIdentity and Access Managementgoogle-cloud-iamFirebase App Checkgoogle-firebase-app-checkModel Armorgoogle-model-armor
and 16 more → Policy engine page# yaml-language-server: $schema=../../schema/component.schema.json # LLM Guard: Protect AI's open-source (MIT) toolkit of 15 prompt scanners and 20 output scanners for # injection, toxicity, secrets and sensitive data, usable as a library or deployed as an API. Retired 2026: # the GitHub repo is archived ("THIS PROJECT HAS BEEN ARCHIVED", last push July 2026) and its Hugging Face # models are no longer maintained, after Palo Alto Networks absorbed Protect AI into Prisma AIRS. schemaVersion: "1" type: "component" id: "llm-guard" kind: "policy-engine" provider: "default" docs: "https://github.com/protectai/llm-guard" defaults: managed: false scope: "resource" properties: apiServer: type: "boolean" default: false inputScanners: type: "boolean" default: false outputScanners: type: "boolean" default: false