#Guardrails

Showing 57 of 57 repositories tagged #guardrails, ranked by stars

data-privacy-stack
data-privacy-stack
presidio

An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports NLP, pattern matching, and customizable pipelines.

Score
100
β˜… 9.9k β‘‚ 1.2k +54/day
Python
BoundaryML
BoundaryML
baml

The programming language for agents

Score
100
β˜… 8.5k β‘‚ 441 β€”
Rust
superagent-ai
superagent-ai
superagent

Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.

Score
100
β˜… 6.7k β‘‚ 962 +2/day
TypeScript
NVIDIA-NeMo
NVIDIA-NeMo
Guardrails

NeMo Guardrails is an open-source toolkit for easily adding programmable guardrails to LLM-based conversational systems.

Score
67
β˜… 6.6k β‘‚ 756 +16/day
Python
maximhq
maximhq
bifrost

Fastest enterprise AI gateway (50x faster than LiteLLM) with adaptive load balancer, cluster mode, guardrails, 1000+ models support & <100 Β΅s overhead at 5k RPS.

Score
0
β˜… 6.4k β‘‚ 868 +14/day
Go
deepsense-ai
deepsense-ai
ragbits

Building blocks for rapid development of GenAI applications

Score
96
β˜… 1.7k β‘‚ 140 +1/day
Python
theopenco
theopenco
llmgateway

Route, manage, and analyze your LLM requests across multiple providers with a unified API interface.

Score
100
β˜… 1.4k β‘‚ 155 +4/day
TypeScript
souvikmajumder26
souvikmajumder26
Multi-Agent-Medical-Assistant

βš•οΈGenAI powered multi-agentic medical diagnostics and healthcare research assistance chatbot. πŸ₯ Designed for healthcare professionals, researchers and patients.

Score
0
β˜… 919 β‘‚ 202 β€”
Python
framerslab
framerslab
agentos

TypeScript AI agent framework: cognitive memory, runtime tool forging, multi-agent orchestration, 11 LLM providers.

Score
92
β˜… 591 β‘‚ 88 +2/day
TypeScript
SponsioLabs
SponsioLabs
Sponsio

Deterministic safety solutions for probabilistic AI agents

Score
33
β˜… 466 β‘‚ 28 +1/day
Python
ZaxbyHub
ZaxbyHub
opencode-swarm

Architect-centric agentic swarm plugin for OpenCode. Hub-and-spoke orchestration with SME consultation, code generation, and QA review.

Score
100
β˜… 392 β‘‚ 40 +3/day
TypeScript
CoWork-OS
CoWork-OS
CoWork-OS

Local-first personal agentic OS and everything app for coding, knowledge work, web design, automations, and artifacts.

Score
92
β˜… 381 β‘‚ 57 +5/day
TypeScript
PrismorSec
PrismorSec
prismor

Runtime security for Agents. Blocks dangerous commands, prevent secret leaks, stop prompt injection, gate risky package installs and visibility and control over tool calls.

Score
85
β˜… 227 β‘‚ 18 +5/day
Python
ferro-labs
ferro-labs
ai-gateway

Unified AI Gateway for 30+ LLMs (OpenAI, Anthropic, Bedrock, Azure etc) with Caching, Guardrails, A/B test & cost controls. Go-native Fastest & Scalable AI Gateway LiteLLM & Kong AI Gateway alternative.

Score
88
β˜… 173 β‘‚ 30 +8/day
Go
dipampaul17
dipampaul17
AgentGuard

Real-time guardrail that shows token spend & kills runaway LLM/agent loops.

Score
4
β˜… 160 β‘‚ 9 β€”
JavaScript
SantanderAI
SantanderAI
autoguardrails

Alignment-research scaffold (autoresearch-style) for LLM guardrails: search over a single policy.md surface

Score
84
β˜… 122 β‘‚ 31 +10/day
Python
jnMetaCode
jnMetaCode
shellward

AI Agent Security Middleware β€” 8-layer defense, DLP data flow, prompt injection detection, zero dependencies. SDK + MCP server for Claude Code, Cursor, LangChain, Hermes Agent & more.

Score
69
β˜… 122 β‘‚ 20 +6/day
TypeScript
OrlojHQ
OrlojHQ
orloj

An orchestration runtime for multi-agent AI systems. Declare agents, tools, and policies as YAML; Orloj schedules, executes, routes, and governs them for production-grade operation.

Score
80
β˜… 106 β‘‚ 13 +1/day
Go
Firma-AI
Firma-AI
openfirma

Runtime enforcement boundary for AI agents: a local sidecar that gates every outbound call against Cedar policies you own. Deterministic, call-level, no model on the hot path

Score
0
β˜… 100 β‘‚ 4 +2/day
Rust
Gk0Wk
Gk0Wk
ClawGuard

The antivirus for OpenClaw β€” approve dangerous actions, scan skills, block secret leaks, and keep humans in control, for safety.

Score
46
β˜… 100 β‘‚ 2 β€”
TypeScript
zdk
zdk
rm-safely

'rm' safely – a safety net for rm

Score
54
β˜… 100 β‘‚ 3 +1/day
Shell
lc198707
lc198707
anti-lie

Don't make LLMs honest. Make every factual claim auditable. β€” An LLM Claim Auditing Layer with T1-T7 truth gradients. 98.1% business effectiveness on LiarBench v0.2.

Score
68
β˜… 88 β‘‚ 7 β€”
Python
arthur-ai
arthur-ai
arthur-engine

Make AI work for Everyone - Monitoring and governing for your AI/ML

Score
76
β˜… 84 β‘‚ 12 β€”
Python
robbiecalvin
robbiecalvin
codexmaster

Master Codex with this Framework file system + Prompt Generator consisting of 32 markdown files that will set such strict constraints and rules for Codex that its output is nearly flawless. Files for: Governance, Execution, Workflow, Standards, Recovery, Design, Validation, Config plus Master Prompt Generator for App and Website Builds!

Score
52
β˜… 83 β‘‚ 8 +1/day
HTML
MDalamin5
MDalamin5
End-to-End-Agentic-Ai-Automation-Lab

This repository contains hands-on projects, code examples, and deployment workflows. Explore multi-agent systems, LangChain, LangGraph, AutoGen, CrewAI, RAG, MCP, automation with n8n, and scalable agent deployment using Docker, AWS, and BentoML.

Score
100
β˜… 83 β‘‚ 36 β€”
Jupyter Notebook
mturac
mturac
promptguard

Audits prompts as behavioral contracts. Pre-write guard for agents that ship code.

Score
48
β˜… 82 β‘‚ 0 +2/day
Python
vstorm-co
vstorm-co
pydantic-ai-shields

Guardrail capabilities for Pydantic AI β€” cost tracking, prompt injection detection, PII filtering, secret redaction, tool permissions, and async guardrails. Built on pydantic-ai's native capabilities API.

Score
72
β˜… 77 β‘‚ 10 +3/day
Python
buptlg
buptlg
fireagent

Knowledge-enhanced multimodal Fire Safety Agent with two-hop reasoning, evidence-tree RAG, open-set guardrails, and four-layer memory.

Score
60
β˜… 77 β‘‚ 1 +1/day
Python
securelayer7
securelayer7
PROMPTPurify

Prompt-injection guardrail for LLM applications. Compact model that outperforms larger open-source guards. No regex, no signatures. Demo: anton.securelayer7.net

Score
62
β˜… 76 β‘‚ 20 +2/day
TypeScript
invariantlabs-ai
invariantlabs-ai
invariant-gateway

LLM proxy to observe and debug what your AI agents are doing.

Score
16
β˜… 75 β‘‚ 9 β€”
Python
imran-siddique
imran-siddique
agent-os

[DEPRECATED] Moved to microsoft/agent-governance-toolkit

Score
56
β˜… 72 β‘‚ 21 +1/day
Python
langwatch
langwatch
langevals

LangEvals aggregates various language model evaluators into a single platform, providing a standard interface for a multitude of scores and LLM guardrails, for you to protect and benchmark your LLM models and pipelines.

Score
32
β˜… 72 β‘‚ 9 β€”
TheArchitectit
TheArchitectit
agent-guardrails-template

Template repository with AI agent guardrails, safety protocols, and sprint task framework. For Claude, GPT, Gemini, and all LLMs.

Score
44
β˜… 70 β‘‚ 2 β€”
Go
whitecircle
whitecircle
circle-guard-bench

First-of-its-kind AI benchmark for evaluating the protection capabilities of large language model (LLM) guard systems (guardrails and safeguards)

Score
28
β˜… 70 β‘‚ 5 β€”
Python
lucapohl-angel
lucapohl-angel
ATLAS_OS

Hook-driven multi-agent CLI β€” one prompt to specs, code, tests, and a shipped release.

Score
80
β˜… 67 β‘‚ 18 β€”
TypeScript
yaalalabs
yaalalabs
agent-kernel

The Operating System for Scalable Enterprise AI Agents - Run, orchestrate, and deploy Compliant Enterprise AI Agents at scale across frameworks, without lock-in, rewrites or fragile glue code. Native support for MCP, A2A. Interface with all mainstream communication channels seamlessly out of the box, production ready from day one.

Score
50
β˜… 66 β‘‚ 33 +20/day
Python
ArmorerLabs
ArmorerLabs
Armorer

Local control plane for running AI agents with sandboxes, approvals, guardrails, credentials, and runtime health.

Score
31
β˜… 58 β‘‚ 3 β€”
TypeScript
ProjectRecon
ProjectRecon
awesome-ai-agents-security

A living map of the AI agent security ecosystem.

Score
77
β˜… 54 β‘‚ 60 +3/day
killertcell428
killertcell428
aigis

Deterministic, zero-dependency Python firewall for AI agents β€” MCP rug-pull, memory poisoning, indirect injection, exfil channels. 44 compliance templates (US/CN/JP/EU).

Score
38
β˜… 51 β‘‚ 7 β€”
Python
sebuzdugan
sebuzdugan
frai

Open-source toolkit for responsible AI: CLI + SDK to scan code, collect evidence, and generate model cards, risk files, evals, and RAG indexes.

Score
0
β˜… 51 β‘‚ 4 β€”
JavaScript
humanbound
humanbound
humanbound

Open-source AI agent red-team engine, SDK, and CLI. Run offline or against the Humanbound Platform.

Score
23
β˜… 51 β‘‚ 5 +6/day
Python
escoffier-labs
escoffier-labs
brigade

One local source for the MCP servers, tools, and memory your AI coding agents share, synced into each tool's native config with a review gate and a receipt for every change. No daemon, no lock-in.

Score
40
β˜… 50 β‘‚ 3 +50/day
Python
ariffazil
ariffazil
arifos

arifOS β€” Constitutional MCP kernel for governed AI execution. AAA trinity: AGI (Mind) Β· ASI (Heart) Β· APEX (Judge). Built for the sovereign agentic era.

Score
36
β˜… 49 β‘‚ 8 +1/day
Python
SihyeonJeon
SihyeonJeon
why-was-fable-banned

Spec-first, evidence-gated engineering-procedure enforcement for AI coding agents (Claude Code + Codex). The agent can't edit until it writes a passing spec.

Score
60
β˜… 46 β‘‚ 12 β€”
Python
konamgil
konamgil
mandu

An open-source framework that prevents AI agents from breaking your codebase.

Score
20
β˜… 46 β‘‚ 4 +1/day
TypeScript
MaxMLang
MaxMLang
pytector

Easy to use LLM Prompt Injection Detection and Prompt Input Sanitization / Detector Python Package with support for local models, API-based safeguards, and LangChain guardrails.

Score
40
β˜… 44 β‘‚ 24 β€”
Python
CollieAi
CollieAi
llm-firewall

AI Firewall & LLM security toolkit - protect your AI applications from prompt injection, jailbreaks, PII leakage, and adversarial attacks

Score
0
β˜… 43 β‘‚ 1 β€”
FareedKhan-dev
FareedKhan-dev
agentic-guardrails

Layered guardrails to make agentic AI safer and more reliable.

Score
0
β˜… 43 β‘‚ 15 β€”
Jupyter Notebook
darfaz
darfaz
clawmoat

The open-source agent firewall. Prevent AI agents from leaking data, using dangerous tools, and importing poisoned dependencies.

Score
8
β˜… 41 β‘‚ 6 +1/day
JavaScript
ArmorerLabs
ArmorerLabs
Armorer-Guard

Fast local Rust scanner for AI-agent prompt injection, credential leaks, exfiltration, and risky tool calls

Score
15
β˜… 40 β‘‚ 10 β€”
Rust
studioKjm
studioKjm
ai-harness-template

AI Harness Engineering Template β€” guardrails, gates, and boundaries for AI coding agents. One-command install. Zero dependencies.

Score
0
β˜… 40 β‘‚ 4 β€”
Python
Vbj1808
Vbj1808
Dokis

Lightweight RAG provenance middleware. Verifies every claim in an LLM response is grounded in a retrieved source - without an LLM call.

Score
12
β˜… 37 β‘‚ 0 β€”
Python
IDinsight
IDinsight
ask-a-question

Trustworthy question-answering AI plugin for chatbots in the social sector with advanced content performance analysis.

Score
24
β˜… 37 β‘‚ 11 +1/day
Python
aws-samples
aws-samples
sample-amazon-bedrock-for-beginners

Code samples for building AI applications on AWS with Amazon Bedrock, including Converse API, tool use, RAG with Knowledge Bases, guardrails, and a full agent built with the Strands Agents SDK.

Score
64
β˜… 36 β‘‚ 37 +1/day
Python
justi
justi
ruby_llm-contract

Validate and retry LLM outputs for ruby_llm. Describe the JSON response you expect, fall back to a stronger model when the cheaper one fails the rules, and gate CI on regressions β€” all as one contract object per step.

Score
20
β˜… 35 β‘‚ 0 β€”
Ruby
hortator-ai
hortator-ai
Hortator

A Kubernetes operator that lets AI agents spawn AI agents β€” with guardrails

Score
0
β˜… 28 β‘‚ 3 β€”
Go
dyronrh
dyronrh
awesome-agentops-landscape

A curated list of the best AgentOps tools for 2026 β€” observability, tracing, evaluation, cost monitoring, and guardrails for LLM agents. Covering open-source and SaaS tools with feature benchmarks and architecture guidance.

Score
8
β˜… 17 β‘‚ 4 β€”
Python
Related Topics
#llm#ai-agents#prompt-injection#ai-safety#python#llm-security#ai-security#ai#mcp#agentic-ai#cybersecurity#openai

Β© 2026 GitRepoTrend Β· GitHub repositories by topic Β· Updated weekly