Research, engineering deep-dives, and security analysis from the PromptGuard team.
AISI confirmed frontier models can run a 32-step network attack autonomously. The nearer threat is triggering that through your own agent.
Access control answers 'is this allowed?'. Governance answers four harder questions most AI security platforms never touch.
F1 = 0.887 at 99.1% precision across TensorTrust, JailbreakBench and XSTest — plus an honest account of what a static evasion benchmark cannot prove.
How a compromised security scanner led to credential theft across the AI ecosystem, and what it means for anyone building on LLMs.
One MCP server secures Cursor, Claude, Copilot, Windsurf, Cline, Zed, and every other MCP-compatible tool. One install protects all.
OpenClaw's local-first, multi-channel architecture creates a huge attack surface. The CVEs, the risks, and how to close the gaps.
We have seen every OWASP LLM risk exploited in production. What the list gets right, what it underemphasizes, and what actually matters.
Redacting to [SSN_REDACTED] breaks the model's reasoning. Replacing PII with realistic fake data preserves it and kills the privacy risk.
When PromptGuard blocks an injection at 2 AM you need it in Slack, not tomorrow's email. Configuring webhook alerts and response flows.
A 30-minute OpenAI outage does not have to take your app down. How SmartRouter fails over across six providers without users noticing.
Shadow mode runs a new security config against live traffic, logs disagreements, and validates changes before they affect a single user.
How PromptGuard's ensemble of specialized classifiers detects attacks in parallel, and why several small models beat one large one.
PromptGuard is wire-compatible with the OpenAI API. Change one URL to protect every LLM call. Python, TypeScript, LangChain, and cURL.
Sending user prompts to a security vendor defeats the purpose. Why PromptGuard is self-hostable first, and how to deploy it in your VPC.
LangChain makes it easy to build agents, and just as easy to build vulnerabilities. Securing chains, agents, and RAG without a rewrite.
The moment your AI agent sees a card number, your compliance scope explodes. How to keep PANs out of the LLM context and pass audits.
'We can't use AI' and 'just sign a BAA' are both wrong. The data-minimization architecture for HIPAA-compliant AI in healthcare.
We red-teamed a support bot and extracted a $50,000 refund in four hours. The full cost anatomy of an AI security breach.
Support bots email transaction histories to strangers and issue refunds with no jailbreak keyword. The three-layer defense that works.
You are pulling untrusted HTML, PDFs, and records into your context window. Without scanning, that is arbitrary code from strangers.
Blocking a real user is worse than missing an attack. How we cut false positives from 2.4% to under 0.1% with confidence calibration.
Most tools return '403 Forbidden' and leave you guessing. We return the confidence score, threat type, event ID, and the source code.
How we detect 39+ PII types with layered regex, Luhn checksums, and ML NER, without the false positives that kill adoption.
A chatbot dumped its system prompt when a user asked nicely in French. Why keyword filters fail, and the defense-in-depth that works.
An agent told to clean temp files deleted 3 months of production logs. The default-deny architecture that prevents irreversible damage.
Security that requires manual code changes is security that gets skipped. Secure an entire codebase by changing one configuration.
How PromptGuard inspects every prompt with a multi-detector pipeline, ML ensemble, and multi-provider routing, without codebase churn.
Using GPT-4 to check whether a prompt is safe doubles your latency and your bill. Why we bet on a classical ML ensemble instead.
We sit between thousands of apps and their LLM providers. The five categories of prompt injection we block, and why they are hard to stop.
You would not ship code without tests. Why ship prompts without adversarial testing? A 20-vector red team engine inside the gateway.
We were tired of black-box tools that blocked legitimate users without explanation. Why we built an AI firewall developers don't hate.