Heads up This site is currently under heavy development.
← all tools
◆ AI/LLM Security

LLM Guard

open-source

Summary

LLM Guard is an open-source Python library, MIT-licensed, that scans prompts and LLM outputs for prompt injection, harmful language, and data leakage before they cause damage, and it's installed via pip and called directly from application code rather than run as a standalone service. It's aimed at developers building LLM-powered applications who need to sanitize inputs and outputs at the point of integration, and it fits the broader category of guardrail and content-filtering layers that sit between an application and its model provider. The project, maintained by Protect AI, has drawn 25 contributors since its first commit in 2023, but its README now carries an archive notice stating it is no longer under active development, so while the package remains installable, anyone evaluating it should treat it as frozen rather than a going concern.

What LLM Guard answers

Is this something I should still bring into a new project?

commits have slowed to about ten in the past year and the README carries an archive notice, so treat it as frozen code to inherit rather than a library with a future

Do I need to run a separate service alongside my application?

no, it's a library called directly from application code, so there's no server process or admission layer to stand up

What kind of problems does it actually catch?

prompt injection attempts, harmful language, and data leaking out of model responses, checked on the way in and the way out

Who is going to maintain the fixes if something breaks?

nobody on the project side; with 25 contributors historically but no active development, patches and version bumps fall entirely on whoever adopts it

Does it work with any model provider or only specific ones?

it sits between the application and whatever model is called, scanning text rather than intercepting a particular vendor's API

What Python version do I need before installing it?

version 3.9 or higher, with a small base set of libraries and heavier scanner-specific dependencies pulled in only when those scanners are used

all 3 features, with the evidence for each →

Features

3 capabilities · 3 backed by code, an API document or a real run

Built from everything we hold on LLM Guard — every release we have summarised, its product documentation and how that documentation has changed, its README, its command-line surface and API, and runs we performed ourselves. Dates are when we first saw a capability, not when the vendor introduced it.

Capability area
All capabilities 3 capabilities
Scanner benchmarking verified Runs benchmarks against named scanner classes, with options to specify the scanner name and type. 2 other sources · first seen Nov 2023

command line

Embedded server verified Runs a local server on a configurable port. 1 other source · first seen Apr 2024

command line

Configuration file support verified Accepts a path to a configuration file to control tool behaviour. 1 other source · first seen Feb 2024

command line

Capability
Evidence

Lines in monospace are the tool's own words — help text parsed from its source, or an endpoint from its API document. Everything else is our summary of a dated release or documentation change, linked back to the source it came from.

Release history

Nothing shipped since we started watching. Releases and docs updates land here as they happen.

last release May 19, 2025 · watching since Jul 18, 2026

my-toolchain — 0 tools
paste an install list to detect your tools

A brew list, a Brewfile, requirements.txt, a Dockerfile — or just the product names, free-form. Nothing leaves your browser.

    browse all tools →