{"jtbd":{"id":"prompt-injection-firewall","slug":"prompt-injection-firewall","name":"Prompt-injection / jailbreak firewall","shortName":"Prompt-injection / jailbreak firewall","problemStatement":"Screen untrusted user and retrieved content for instruction-override before it reaches the model — a dedicated firewall, not a content taxonomy."},"pick":{"id":"lakera","slug":"lakera","name":"Lakera Guard","tagline":"Depot pick for a dedicated prompt-injection firewall in front of any LLM. NeMo when you need programmable…","website":"https://www.lakera.ai","overall":8.21,"scoreBand":{"low":7.6,"mid":8.2,"high":8.8,"halfWidth":0.6,"basis":"editorial_prior","display":"7.6–8.8 (editorial prior)"},"scoreLayers":{"editorialPrior":8.21,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14 (platform.lakera.ai/pricing): Community $0 — 10k requests/mo, 8k-token prompt cap, SaaS EU residency, SOC2/GDPR. Enterprise sales-gated — flexible volume, configurable prompt size, SaaS or self-host, SSO/RBAC/SIEM, EU/US residency. No public per-call overage. Acquired by Check Point (Sep 2025); enterprise quotes may route through Check Point. API: POST https://api.lakera.ai/v2/guard (OpenAI-style messages → flagged).","scores":{"capabilityFit":8.8,"pricePerformance":7.8,"latencyReliability":8.4,"developerDx":9,"privacyPosture":8.8,"lockInRisk":5.5,"maturity":8,"overall":8.21,"kind":"curated_estimate","confidence":"high","asOf":"2026-09-14"}},"runnersUp":[{"id":"nvidia-nemo-guardrails","slug":"nvidia-nemo-guardrails","name":"NVIDIA NeMo Guardrails","tagline":"When OpenAI Moderation taxonomy is not enough and you need programmable rails. Host Llama Guard on Groq for…","website":"https://docs.nvidia.com/nemo/guardrails/","overall":7.87,"scoreBand":{"low":7.3,"mid":7.9,"high":8.5,"halfWidth":0.6,"basis":"editorial_prior","display":"7.3–8.5 (editorial prior)"},"scoreLayers":{"editorialPrior":7.87,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14: Open-source NeMo Guardrails library (self-host) + NeMo microservices / NIM integration paths. Cost = your GPUs or NVIDIA API Catalog / NIM inference rates when routing guard models. Supports Llama Guard and other engines via OpenAI-compatible base_url.","scores":{"capabilityFit":8.8,"pricePerformance":7.5,"latencyReliability":8,"developerDx":7,"privacyPosture":8.8,"lockInRisk":4.5,"maturity":8,"overall":7.87,"kind":"curated_estimate","confidence":"high","asOf":"2026-09-14"}},{"id":"openai-moderation","slug":"openai-moderation","name":"OpenAI Moderation","tagline":"Default first-pass content filter for agent I/O. Pair with Llama Guard (Groq) or NeMo Guardrails when you…","website":"https://platform.openai.com/docs/guides/moderation","overall":8.62,"scoreBand":{"low":8,"mid":8.6,"high":9.2,"halfWidth":0.6,"basis":"editorial_prior","display":"8.0–9.2 (editorial prior)"},"scoreLayers":{"editorialPrior":8.62,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-21","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14: Free moderation endpoint — omni-moderation-latest for text+images (images ≤20 MB). Also inline moderation on Responses/Chat Completions via moderation.model. Categories include hate, harassment, self-harm, sexual, violence, illicit, etc. Not customizable / not self-hostable.","scores":{"capabilityFit":8.2,"pricePerformance":9.8,"latencyReliability":9.2,"developerDx":9.4,"privacyPosture":7.5,"lockInRisk":5.5,"maturity":9.5,"overall":8.62,"kind":"curated_estimate","confidence":"high","asOf":"2026-09-14"}},{"id":"prisma-airs","slug":"prisma-airs","name":"Palo Alto Prisma AIRS (ex-Protect AI)","tagline":"Catalog the current SKU (Prisma AIRS), not the dead Protect AI brand. Pick only if PANW is already the…","website":"https://www.paloaltonetworks.com","overall":7.28,"scoreBand":{"low":6.7,"mid":7.3,"high":7.9,"halfWidth":0.6,"basis":"editorial_prior","display":"6.7–7.9 (editorial prior)"},"scoreLayers":{"editorialPrior":7.28,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14: Protect AI is not independent — Palo Alto completed the acquisition 2025-07-22 and folded model scanning, posture, red teaming, runtime, and agent security into Prisma AIRS (3.0 added AI Agent Security / Agent Gateway preview). Enterprise platform SKU; no public per-call list price. Portkey acquisition (closed May 2026) adds a runtime AI gateway. Do not buy 'Protect AI' as a standalone vendor.","scores":{"capabilityFit":8.6,"pricePerformance":5,"latencyReliability":8.8,"developerDx":6.2,"privacyPosture":9,"lockInRisk":7.5,"maturity":9,"overall":7.28,"kind":"curated_estimate","confidence":"medium","asOf":"2026-09-14"}},{"id":"guardrails-ai","slug":"guardrails-ai","name":"Guardrails AI","tagline":"OSS programmable rails peer to NeMo Guardrails. Lakera when you want a hosted injection firewall API…","website":"https://guardrailsai.com","overall":8.2,"scoreBand":{"low":7.6,"mid":8.2,"high":8.8,"halfWidth":0.6,"basis":"editorial_prior","display":"7.6–8.8 (editorial prior)"},"scoreLayers":{"editorialPrior":8.2,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14: OSS Guardrails + Guardrails Hub (70+ validators) free/self-host. Guardrails Pro enterprise managed — usage-based / quote; AWS Marketplace listings historically cite ~$50k annual optional contracts. No public per-call Pro matrix — treat Pro as sales-led.","scores":{"capabilityFit":8.4,"pricePerformance":8.8,"latencyReliability":7.8,"developerDx":8.2,"privacyPosture":8.5,"lockInRisk":3,"maturity":7.8,"overall":8.2,"kind":"curated_estimate","confidence":"medium","asOf":"2026-09-14"}},{"id":"hiddenlayer","slug":"hiddenlayer","name":"HiddenLayer","tagline":"Enterprise AI security peer to Prisma AIRS / Cisco AI Defense. Lakera/NeMo/Guardrails for builders…","website":"https://www.hiddenlayer.com","overall":6.88,"scoreBand":{"low":6.3,"mid":6.9,"high":7.5,"halfWidth":0.6,"basis":"editorial_prior","display":"6.3–7.5 (editorial prior)"},"scoreLayers":{"editorialPrior":6.88,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","pricingNotes":"As of 2026-09-14: Enterprise AI security platform (model + supply-chain + runtime guardrails). No public list price; secondary estimates ~$30k–$150k/yr. Sales-led only — skip unless security RFP already shortlists them.","scores":{"capabilityFit":8.4,"pricePerformance":4,"latencyReliability":8.2,"developerDx":6,"privacyPosture":8.8,"lockInRisk":6.5,"maturity":8,"overall":6.88,"kind":"curated_estimate","confidence":"medium","asOf":"2026-09-14"}}],"scoreBand":{"low":7.6,"mid":8.2,"high":8.8,"halfWidth":0.6,"basis":"editorial_prior","display":"7.6–8.8 (editorial prior)"},"scoreLayers":{"editorialPrior":8.21,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"whyPickOverHigherScore":{"pickId":"lakera","pickName":"Lakera Guard","pickScore":8.21,"highestScoredCandidateId":"openai-moderation","highestScoredCandidateName":"OpenAI Moderation","highestScore":8.62,"pickHasLowerCompositeScore":true,"delta":-0.41,"pickLeadsOnDimensions":["capabilityFit (8.8 vs 8.2)","privacyPosture (8.8 vs 7.5)"],"explanation":"Lakera Guard (8.21) is the editorial pick for Prompt-injection / jailbreak firewall over higher-composite OpenAI Moderation (8.62) because composite scores are provider-wide priors while Lakera Guard wins on capabilityFit (8.8 vs 8.2), privacyPosture (8.8 vs 7.5): capability on injection/jailbreak detection + dx of a single API. Distinct from content-moderation (taxonomy) and llm-input-guardrails (programmable policy engine)."},"cheapest":null,"recommendedWorkloadQuote":null,"representativeQuote":null,"estimatedTaskCost":null,"freeAlternatives":[{"id":"llm-guard","name":"LLM Guard","kind":"dev_tool","jtbdIds":["prompt-injection-firewall"],"whatYouGet":"Local Python input scanners, including one named PromptInjection. The README says the project is archived. This row is not a hosted firewall.","cost":"oss","license":"MIT","sourceUrl":"https://raw.githubusercontent.com/protectai/llm-guard/main/LICENSE","notes":"LICENSE fetched 2026-10-03 is the MIT License, copyright Protect AI. README fetched the same day lists PromptInjection under prompt scanners. It does not say firewall, and it does not say the scanner checks retrieved documents. Re-fetched twice 2026-10-25 (~10 s apart, plain curl, no login): HTTP 200, no redirect, byte-identical: 'The MIT License (MIT)' / 'Copyright (c) Protect AI. All rights reserved.'. License unchanged.","providerId":null,"limits":null,"asOf":"2026-10-25","freeType":"dev_tool","substitutable":true}],"referenceDocs":[],"falsification":{"jtbdId":"prompt-injection-firewall","jtbdName":"Prompt-injection / jailbreak firewall","currentPickId":"lakera","currentPickScore":8.21,"challengerId":"nvidia-nemo-guardrails","challengerScore":7.87,"currentScoreGap":0.34,"minVerifiedOutcomes":10,"requiredOutcomeMargin":0.49,"requiredSuccessRateDelta":0.15,"maxPickPriceIncreasePct":25,"whatWouldChangePick":["NVIDIA NeMo Guardrails (nvidia-nemo-guardrails) outperforms Lakera Guard (lakera) by >= 0.49 outcome points (or >= 15% worked-rate delta) across >= 10 Countersign-verified production outcomes.","A verified price increase > 25% on Lakera Guard's representative SKU for prompt-injection-firewall without a corresponding capability gain.","Live caller rail exhaustion (?exhausted=lakera) or sustained >= 30% degraded/failed rate in verified production outcomes."],"frozenHoldoutPolicy":{"holdoutSplit":"20% frozen benchmark holdout tasks + 80% live production outcome receipts","requireCountersignReceipt":true,"requiredEvidenceTiers":["outcome_verified","reference_checked"],"minDistinctContributors":2,"antiGamingRule":"Unverified self-reports and seed/editorial rows never mutate picks or scores."},"triggers":[{"kind":"verified_outcomes_outperformance","challengerId":"nvidia-nemo-guardrails","minVerifiedOutcomes":10,"requiredOutcomeMargin":0.49,"requiredWorkedRateDelta":0.15},{"kind":"verified_price_increase","providerId":"lakera","maxPriceIncreasePct":25},{"kind":"live_rail_exhaustion_or_degradation","providerId":"lakera","immediateOverrideUrl":"/api/decide?jtbd=prompt-injection-firewall&exhausted=lakera"}],"submissionSpec":{"falsifyEndpoint":"/api/falsify?jtbd=prompt-injection-firewall","outcomesEndpoint":"POST /api/feedback","correctionsEndpoint":"POST /api/corrections","payloadTemplate":{"agentIdentity":"agent:<your-agent-id>","jtbdId":"prompt-injection-firewall","providerId":"nvidia-nemo-guardrails","outcome":"worked","detail":"Comparative production evaluation on prompt-injection-firewall (n>=10 tasks) with Countersign receipt.","confidence":"high","receipt":{"countersign":{"claim_id":"cs-00000000","status":"verified","evidence_tier":"outcome_verified","counts_as_verified":true}}}}},"whatWouldChangePick":["NVIDIA NeMo Guardrails (nvidia-nemo-guardrails) outperforms Lakera Guard (lakera) by >= 0.49 outcome points (or >= 15% worked-rate delta) across >= 10 Countersign-verified production outcomes.","A verified price increase > 25% on Lakera Guard's representative SKU for prompt-injection-firewall without a corresponding capability gain.","Live caller rail exhaustion (?exhausted=lakera) or sustained >= 30% degraded/failed rate in verified production outcomes."],"routePlan":{"jtbdId":"prompt-injection-firewall","primary":{"providerId":"lakera","name":"Lakera Guard","overall":8.21,"scoreBand":{"low":7.6,"mid":8.2,"high":8.8,"halfWidth":0.6,"basis":"editorial_prior","display":"7.6–8.8 (editorial prior)"},"scoreLayers":{"editorialPrior":8.21,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"primary","reason":"Editorial Depot Pick for Prompt-injection / jailbreak firewall; healthy/eligible under caller constraints."},"fallback":[{"providerId":"nvidia-nemo-guardrails","name":"NVIDIA NeMo Guardrails","overall":7.87,"scoreBand":{"low":7.3,"mid":7.9,"high":8.5,"halfWidth":0.6,"basis":"editorial_prior","display":"7.3–8.5 (editorial prior)"},"scoreLayers":{"editorialPrior":7.87,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"fallback","reason":"Ranked fallback route for Prompt-injection / jailbreak firewall."},{"providerId":"openai-moderation","name":"OpenAI Moderation","overall":8.62,"scoreBand":{"low":8,"mid":8.6,"high":9.2,"halfWidth":0.6,"basis":"editorial_prior","display":"8.0–9.2 (editorial prior)"},"scoreLayers":{"editorialPrior":8.62,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-21","editorialPriorAsOf":"2026-09-14","role":"fallback","reason":"Ranked fallback route for Prompt-injection / jailbreak firewall."},{"providerId":"prisma-airs","name":"Palo Alto Prisma AIRS (ex-Protect AI)","overall":7.28,"scoreBand":{"low":6.7,"mid":7.3,"high":7.9,"halfWidth":0.6,"basis":"editorial_prior","display":"6.7–7.9 (editorial prior)"},"scoreLayers":{"editorialPrior":7.28,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"fallback","reason":"Ranked fallback route for Prompt-injection / jailbreak firewall."},{"providerId":"guardrails-ai","name":"Guardrails AI","overall":8.2,"scoreBand":{"low":7.6,"mid":8.2,"high":8.8,"halfWidth":0.6,"basis":"editorial_prior","display":"7.6–8.8 (editorial prior)"},"scoreLayers":{"editorialPrior":8.2,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"fallback","reason":"Ranked fallback route for Prompt-injection / jailbreak firewall."},{"providerId":"hiddenlayer","name":"HiddenLayer","overall":6.88,"scoreBand":{"low":6.3,"mid":6.9,"high":7.5,"halfWidth":0.6,"basis":"editorial_prior","display":"6.3–7.5 (editorial prior)"},"scoreLayers":{"editorialPrior":6.88,"measuredBenchmark":null,"verifiedOutcomeScore":null,"verifiedOutcomeCount":0,"accountRuntimeState":"unprobed"},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","role":"fallback","reason":"Ranked fallback route for Prompt-injection / jailbreak firewall."}],"disqualified":[],"expectedRegret":{"scoreDeltaVsUnconstrainedPick":0,"unconstrainedPickId":"lakera","activePrimaryId":"lakera","summary":"0.00 score regret: unconstrained editorial pick satisfies all caller constraints."},"evidenceAgeDays":{"editorialScoreAgeDays":43,"pricingVerifiedAgeDays":0,"editorialPriorAsOf":"2026-09-14","pricingLastVerifiedAt":"2026-10-27"},"confidenceBand":{"low":7.6,"mid":8.2,"high":8.8,"halfWidth":0.6,"basis":"editorial_prior","display":"7.6–8.8 (editorial prior)"},"constraintsApplied":false,"constraintBundle":{"task":null,"jtbd":"prompt-injection-firewall","quotaExhausted":[],"degraded":[],"healthy":[],"budgetUsd":null,"maxLatencyMs":null,"region":null,"privacy":null,"exit":[],"existing":[]}},"pricingLastVerifiedAt":"2026-10-27","editorialPriorAsOf":"2026-09-14","tie":false,"scoreGap":0.34,"decidingFactor":null,"tieNote":null,"rationale":"capability on injection/jailbreak detection + dx of a single API. Distinct from content-moderation (taxonomy) and llm-input-guardrails (programmable policy engine).","whenNotTopPick":"Need programmable multi-step rails / topical policies — NeMo Guardrails; only need free hate/sexual/violence flags — OpenAI Moderation; already standardized on Palo Alto — Prisma AIRS; Cisco estate — cisco-ai-defense.","skipTopPick":false,"skipReason":null,"matchedConstraints":[],"pricingSummary":"As of 2026-09-14 (platform.lakera.ai/pricing): Community $0 — 10k requests/mo, 8k-token prompt cap, SaaS EU residency, SOC2/GDPR. Enterprise sales-gated — flexible volume, configurable prompt size, SaaS or self-host, SSO/RBAC/SIEM, EU/US residency. No public per-call overage. Acq…","cite":"Depot Pick for prompt-injection-firewall: lakera (asOf 2026-09-14). See GET /api/jtbds/prompt-injection-firewall + GET /api/methodology.","nextActions":[{"step":1,"title":"Inspect full JTBD + embeds","href":"/api/jtbds/prompt-injection-firewall?embed=providers","why":"Confirm pick, runners-up, and methodology notes."},{"step":2,"title":"Quote sourced SKUs","href":"/api/quote?jtbd=prompt-injection-firewall","why":"Depot Pick SKUs plus the cheapest sourced SKU whose unit matches this job. Does not change the pick. Does not blend input and output or borrow a chat rate for a non-chat job."},{"step":3,"title":"Open provider detail","href":"/api/providers/lakera","why":"Scores, pricingNotes, strengths/weaknesses, communitySignals (claims only)."},{"step":4,"title":"Cite methodology","href":"/api/methodology","why":"Required when publishing a Depot Pick citation."},{"step":5,"title":"Grab badge SVG","href":"/api/badge?type=depot-pick&jtbd=prompt-injection-firewall","why":"Embed in README / agent passport."},{"step":6,"title":"Post production insight","method":"POST","href":"/api/insights","why":"Unverified until curated; never auto-mutates official scores."}],"honesty":["Do not invent scores or benches.","Insights are claims until curated/reviewed; they never silently mutate official scores.","lockInRisk higher = more lock-in (worse).","normalizedUsdPerMillionTokens is set only for a single sourced token row. Otherwise null, with a machine-readable reason. Do not coerce GPU, minute, or per-1k search units.","Runners-up are not Depot Picks.","Depot overall is editorial_weighted, not Arena Elo and not an Artificial Analysis index."],"asOf":"2026-09-14","depth":{"whenNotToUse":{"text":"Need programmable multi-step rails / topical policies — NeMo Guardrails; only need free hate/sexual/violence flags — OpenAI Moderation; already standardized on Palo Alto — Prisma AIRS; Cisco estate — cisco-ai-defense.","source":"editorial `whenNotTopPick` (data/jtbds.json)"},"whenNotToUseReason":null,"runnerUp":{"providerId":"nvidia-nemo-guardrails","name":"NVIDIA NeMo Guardrails","overallForJob":7.87,"pickOverallForJob":8.21,"beatsPickOn":["lockInRisk"],"source":"first resolvable entry of the job's editorially ranked `runnersUpIds`; scores are stored job-weighted scores"},"runnerUpReason":null,"lockIn":{"pickLockInRisk":5.5,"runnerUpLockInRisk":4.5,"scale":"0–10 stored curated estimate; higher = more lock-in (worse)","pickExitSignals":[],"runnerUpExitSignals":["open source (provider tag `oss`)"],"pickNotes":[],"selfHostFallback":[{"id":"llm-guard","name":"LLM Guard","license":"MIT","sourceUrl":"https://raw.githubusercontent.com/protectai/llm-guard/main/LICENSE"}],"migration":"Runner-up NVIDIA NeMo Guardrails has lower stored lock-in risk (4.5 vs 5.5, 0–10, higher = more lock-in). Self-host fallback listed for this job: LLM Guard.","migrationReason":null,"derivedFrom":"stored lockInRisk scores, provider tags (oss, self-host, openai-compat, open-models), free rows that list this job, and verbatim provider notes. No migration guide was invented."}},"citation":{"text":"Agent Provider Depot (v0.12.153), Depot Pick for prompt-injection-firewall: lakera, scores as of 2026-09-14, retrieved 2026-10-27. https://getagentdepot.com/jtbds/prompt-injection-firewall","markdown":"[Agent Provider Depot](https://getagentdepot.com/jtbds/prompt-injection-firewall) (v0.12.153) — Depot Pick for `prompt-injection-firewall`: **lakera** (scores as of 2026-09-14, retrieved 2026-10-27)","fields":{"publisher":"Agent Provider Depot","version":"0.12.153","role":"depot_pick","jtbdId":"prompt-injection-firewall","providerId":"lakera","scoreAsOf":"2026-09-14","retrievedOn":"2026-10-27","page":"https://getagentdepot.com/jtbds/prompt-injection-firewall","api":"https://getagentdepot.com/api/decide?jtbd=prompt-injection-firewall"},"howToCite":"Cite Depot as an editorial, dated recommendation, not a benchmark: name the job, the Depot Pick (or runner-up), the score asOf date and the day you retrieved it, and link the job page. Format: “Agent Provider Depot (v{version}), Depot Pick for {jobId}: {providerId}, scores as of {scoreAsOf}, retrieved {retrievedOn}. {baseUrl}/jtbds/{jobId}”. Quote prices only with their own sourceUrl and asOf. If the pick's score is stale (freshness.pick.score.stale), say so."},"freshness":{"pick":{"score":{"asOf":"2026-09-14","ageDays":43,"stale":true,"staleAfterDays":30,"reason":null},"lastReviewed":{"asOf":"2026-09-14","ageDays":43,"stale":true,"staleAfterDays":30,"reason":null},"sourceCheck":{"checkedAt":"2026-10-27","sourceUrls":3,"sourcesReachable":3,"pricingRows":0,"pricingRowsReconfirmed":0,"note":"A source re-check confirms the page is reachable and, for pricing rows, that the stored amount and SKU name appear on it. It does not re-derive or change the score.","reason":null}},"scoreAsOf":"2026-09-14","editorialPriorAsOf":"2026-09-14","pricingLastVerifiedAt":"2026-10-27","pickLastReviewed":"2026-09-14","runnersUpScoreAsOf":["2026-09-14","2026-09-14","2026-09-14","2026-09-14","2026-09-14"],"contractAsOf":"2026-10-03","pricingShape":"prose_notes_only","normalizedUsdPerMillionTokens":null,"normalizationStatus":"unavailable","normalizationReason":"no_sourced_price"},"pricingContract":{"normalizedUsdPerMillionTokens":null,"normalizationStatus":"unavailable","normalizationReason":"no_sourced_price","shape":"prose_notes_only","filterable":false,"priceSortEligible":false,"priceSortKeyUsdPerMillionInputTokens":null,"rows":[],"notesExcerpt":"As of 2026-09-14 (platform.lakera.ai/pricing): Community $0 — 10k requests/mo, 8k-token prompt cap, SaaS EU residency, SOC2/GDPR. Enterprise sales-gated — flexible volume, configurable prompt size, SaaS or self-host, SSO/RBAC/SIEM, EU/US residency. No public per-call overage. Acq…","notesCheck":{"status":"no_known_contradiction","pairs":[],"review":null,"note":null},"lastReviewed":"2026-09-14","scoreAsOf":"2026-09-14","website":"https://www.lakera.ai","doNotParse":"Do not parse pricingNotes. Use rows only. normalizedUsdPerMillionTokens is a single number only when this provider has exactly one sourced token row. Input/output, context tiers, and non-token units stay null at this level.","gap":"No sourced price row for this provider. pricingNotes stay prose. See research/gaps.md."},"links":{"jtbd":"/jtbds/prompt-injection-firewall","jtbdApi":"/api/jtbds/prompt-injection-firewall","leaderboard":"/api/leaderboards?jtbd=prompt-injection-firewall","methodology":"/api/methodology","badge":"/api/badge?type=depot-pick&jtbd=prompt-injection-firewall","decide":"/api/decide?jtbd=prompt-injection-firewall","humanPage":"/jtbds/prompt-injection-firewall","alternatives":"/api/alternatives?provider=lakera","canonical":"/api/canonical","quote":"/api/quote?jtbd=prompt-injection-firewall","falsify":"/api/falsify?jtbd=prompt-injection-firewall"},"constraintBundle":{"task":null,"jtbd":"prompt-injection-firewall","quotaExhausted":[],"degraded":[],"healthy":[],"budgetUsd":null,"maxLatencyMs":null,"region":null,"privacy":null,"exit":[],"existing":[]},"stackContext":{"host":null,"framework":null,"repo":null,"lang":null,"existing":[],"volume":null,"sender":null,"detectedFromTask":[]},"keep":null,"contextAdvice":null,"communityFeedback":{"pickOnThisJob":{"failed":0,"degraded":0,"worked":0,"insights":1,"withVerifiedReceipt":0,"failureModes":{},"latestAt":"2026-09-13T16:05:00.000Z","note":"Agent-reported claims (unverified unless a receipt is verified by Depot's re-check). They never change scores or picks."},"outcomes":{"job":{"n":0,"worked":0,"degraded":0,"failed":0,"failureModes":{},"verifiedReports":0,"contributors":0,"excluded":{"seed_editorial":1,"test":0,"notFeedback":0},"reason":"no_submitted_outcome_reports_yet"},"pick":{"providerId":"lakera","n":0,"worked":0,"degraded":0,"failed":0,"failureModes":{},"evidenceTiers":{"agent_claim":0,"self_declared":0,"reference_checked":0,"outcome_verified":0},"reason":"no_submitted_outcome_reports_yet"},"scoresMutated":false,"more":"/api/outcomes?jtbd=prompt-injection-firewall"},"report":"POST /api/feedback {agentIdentity, outcome: failed|degraded|worked, detail, providerId, jtbdId, failureModeId?, receipt?}"}}