Guardrails and filtering
Checking what goes into or comes out of a model at request time: jailbreak detection, topic and format constraints, toxicity, blocking and rewriting. Testing for weaknesses ahead of time is red teaming.
21 in this category
NARROW BY WHAT THIS CATEGORY ASKS
LICENCE · 7 NOT READ
CHECKS · 8 NOT READ
OPEN SOURCE · 9 NOT READ
PRODUCTUSED BYSTARSDOWNLOADS 30D
bifrostFastest enterprise AI gateway (50x faster than LiteLLM) with adaptive load balancer, cluster mode, guardrails, 1000+ models support & <100 µs overhead at 5k RPS.8,214
Guardrails AIAdding guardrails to large language models.7,389119,350
guardrailsNeMo Guardrails is an open-source toolkit for easily adding programmable guardrails to LLM-based conversational systems.7,107
NVIDIA NeMo GuardrailsNeMo Guardrails is an open-source toolkit for easily adding programmable guardrails to LLM-based conversational systems.17,100
superagentSuperagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.6,749
future-agiOpen-source, end-to-end platform for evaluating, observing, and improving LLM and AI agent applications. Tracing · Evals · Simulations · Datasets · Gateway · Guardrails. Self-hostable. Apache 2.0.1,982
valqoreSafety-first guardrails for AI-driven cloud and Kubernetes operations1,929
cc-safety-netA pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity 1,535
aktoAkto is the fastest growing AI Security platform for your teams to secure AI agents, MCPs, LLMs, Agent skills, Gen AI apps in your organization.1,515
PipeLabOpen-source AI agent firewall for MCP security and agent egress. Scans mediated HTTP, MCP, A2A, and WebSocket traffic for exfiltration, SSRF, and prompt injection, and emits mediator-signed action rec841
Protect AIThe modelscan package is a cli tool for detecting unsafe operations in model files across various model serialization formats.77324,274
ArcjetRuntime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop it into your JS/TS code.682
agentosTypeScript AI agent framework: cognitive memory, dynamic personalities, emergent behaviors and self-building designs623
SponsioDeterministic safety solutions for probabilistic AI agents440
Project CodeGuardProject CodeGuard is an AI model-agnostic security framework and ruleset that embeds secure-by-default practices into AI coding workflows (generation and review). It ships core security rules, transla423
Adversa AISecureClaw - Security Plugin and Skill for OpenClaw OWASP-Aligned348
Prismor Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agn343
Govcraft🦀 Prevents outdated Rust code suggestions from AI assistants. This MCP server fetches current crate docs, uses embeddings/LLMs, and provides accurate context via a tool call.295
ai-gatewayUnified AI Gateway for 30+ LLMs (OpenAI, Anthropic, Bedrock, Azure etc) with Caching, Guardrails, A/B test & cost controls. Go-native Fastest & Scalable AI Gateway LiteLLM & Kong AI Gateway alternativ256
Arthur AIArthur Python SDK506FF5 AI Guardrailsno tagline on recordSORTED BY ONE STATED COLUMN · USED BY = LISTED PRODUCTS DEPENDING ON IT, IN THIS DIRECTORY — NOT A POPULARITY FIGURE · NO OVERALL SCORE AND NO RANK COLUMN, BECAUSE BLENDING ADOPTION, STARS AND DOWNLOADS NEEDS WEIGHTS, AND WEIGHTS ARE AN OPINION PRESENTED AS ARITHMETIC
Cite this page
The count and its date sit inside the citation, because “Guardrails and filtering” without a date is a claim that quietly goes wrong as the category fills.
infratoapp, “Guardrails and filtering — Security / Governance”, read 27 October 2026. 21 listed products. https://www.infratoapp.com/layers/security/guardrails
No overall score, and no rank column
Blending adoption, stars and downloads needs weights, and weights are an opinion presented as arithmetic — so this table sorts by one stated column at a time and shows which. This view holds no billing column and joins no billing table: a sponsor cannot appear higher, and the signals meter is a row’s own confidence, never a score you can sort on.
Frequently asked
What is in the Guardrails and filtering category?
21 products in the Security / Governance layer of the AI stack. Checking what goes into or comes out of a model at request time: jailbreak detection, topic and format constraints, toxicity, blocking and rewriting. Testing for weaknesses ahead of time is red teaming. Listed members include bifrost, Guardrails AI and guardrails. Every fact on each listing carries the page it was read from and the date it was read.
How are Guardrails and filtering compared here?
By the 7 attributes this category declares, asked of every member and answered only where a source states it. A product with no answer on record shows a gap rather than a guess, and no blended score is published — weights would be an opinion presented as arithmetic.
bifrost or Guardrails AI?
Both are listed under Guardrails and filtering. We publish no verdict between them — we hold no benchmark that would support one. What we do hold is the same attribute sheet for each, side by side with the source behind every value, at /compare/bifrost-vs-guardrails-ai.
What does a blank mean on a guardrails and filtering row?
That nobody has told us, not that the answer is no. A hollow ring is "no answer on record", which is a different state from a recorded no — and the two look different on purpose. A listing with a blank has not failed the question; it has not been read for it.
How often are guardrails and filtering figures re-read?
Every value carries the date it was read and a link to the page it came from. Prices move fastest and are re-read most often; an attribute read weeks ago says so rather than presenting itself as current. Anything past 21 days is hidden rather than shown stale.
Is this every guardrails and filtering there is?
No. This is 21 we have read and can cite. A directory that claimed completeness would be making a promise it cannot keep, so the page states its own count instead and says when a category is too thin to shortlist from.
Can a vendor pay to rank higher here?
No. Nothing on this page can be bought: a sponsor cannot enter a table, reorder a row or change a mark, and there is no ranked position for sale. How the site is paid for, and the line each source of money does not cross, is set out under money and independence at /our-data#sec5.