{"id":"llm-input-guardrails","slug":"llm-input-guardrails","name":"Programmable LLM input/output guardrails","shortName":"Programmable LLM input/output guardrails","problemStatement":"Enforce custom safety, topical, and tool-use policies around agent LLM calls — not just a fixed taxonomy.","whenNotTopPick":"Need a dedicated prompt-injection API — lakera; only need free category flags — openai-moderation; production hallucination monitoring SaaS — galileo; cheap Llama Guard leaf — groq.","categoryIds":["cat-observability","cat-inference-apis"],"depotPickProviderId":"nvidia-nemo-guardrails","depotPickRationale":"capability of policy engine + privacy. Distinct from production-guardrail-evals (monitoring) — this is the runtime rails layer.","runnersUpIds":["lakera","galileo","openai-moderation","groq","guardrails-ai","arthur-ai","hiddenlayer"],"weights":{"capabilityFit":0.25,"pricePerformance":0.18,"latencyReliability":0.15,"developerDx":0.15,"privacyPosture":0.1,"lockInRisk":0.07,"maturity":0.1},"methodologyNotes":"capability of policy engine + privacy. Distinct from production-guardrail-evals (monitoring) — this is the runtime rails layer.","tags":["llm"],"depth":{"whenNotToUse":{"text":"Need a dedicated prompt-injection API — lakera; only need free category flags — openai-moderation; production hallucination monitoring SaaS — galileo; cheap Llama Guard leaf — groq.","source":"editorial `whenNotTopPick` (data/jtbds.json)"},"whenNotToUseReason":null,"runnerUp":{"providerId":"lakera","name":"Lakera Guard","overallForJob":8.21,"pickOverallForJob":7.87,"beatsPickOn":["pricePerformance","latencyReliability","developerDx"],"source":"first resolvable entry of the job's editorially ranked `runnersUpIds`; scores are stored job-weighted scores"},"runnerUpReason":null,"lockIn":{"pickLockInRisk":4.5,"runnerUpLockInRisk":5.5,"scale":"0–10 stored curated estimate; higher = more lock-in (worse)","pickExitSignals":["open source (provider tag `oss`)"],"runnerUpExitSignals":[],"pickNotes":[],"selfHostFallback":[],"migration":"The pick has lower stored lock-in risk than runner-up Lakera Guard (4.5 vs 5.5). Pick exit signals: open source (provider tag `oss`).","migrationReason":null,"derivedFrom":"stored lockInRisk scores, provider tags (oss, self-host, openai-compat, open-models), free rows that list this job, and verbatim provider notes. No migration guide was invented."}},"freshness":{"pick":{"score":{"asOf":"2026-09-14","ageDays":43,"stale":true,"staleAfterDays":30,"reason":null},"lastReviewed":{"asOf":"2026-09-14","ageDays":43,"stale":true,"staleAfterDays":30,"reason":null},"sourceCheck":{"checkedAt":"2026-10-27","sourceUrls":3,"sourcesReachable":3,"pricingRows":0,"pricingRowsReconfirmed":0,"note":"A source re-check confirms the page is reachable and, for pricing rows, that the stored amount and SKU name appear on it. It does not re-derive or change the score.","reason":null}}}}