Prevención inteligente de amenazas para LLMs, agentes y APIs

Inspección de prompts y respuestas

Cada prompt y cada respuesta del modelo pasa por un DSL de políticas. Detecta inyección de prompts, jailbreak e instrucciones no autorizadas antes de que lleguen al modelo o al usuario.

Prevención de pérdida de datos en línea

PII, PHI, secretos, marcados clasificados y tokens de sensibilidad personalizada se redactan o bloquean antes de que un prompt salga de su perímetro.

Gobernanza de uso de herramientas y funciones

Cree listas de permitidos para las herramientas que un agente puede invocar. Inspeccione argumentos, aplique tipos de argumentos y revoque el acceso a herramientas al detectar una violación de política.

Latencia inferior al milisegundo

Patrones de implementación en línea o fuera de banda. En línea añade menos de un milisegundo a la mayoría de las rutas de inferencia; fuera de banda captura telemetría sin impacto al usuario.

Protección DDoS y API

Limite la tasa, regule y aísle a los llamadores abusivos en la capa de API de IA. Las reglas adaptativas se ajustan según los patrones de tráfico en vivo.

Defensa ML adversaria

Detecte intentos de inversión de modelo, inferencia de membresía y envenenamiento en APIs de proveedores y modelos autohospedados.

Dashboard

AI Firewall Dashboard: see your AI usage before you secure it

The AI Security Dashboard tracks audit records, registered members, AI HealthChecks, and configured LLMs, and shows which models handle general queries, reliability and hallucination checks, and RAG. Token Usage splits the last seven days into input and output tokens.

Secure Chat

AI Firewall Secure Chat: catch sensitive data before a prompt goes anywhere

Secure Chat detects PII like a name, address, and Social Security number, stops with a compliance warning, and swaps each value for a realistic stand-in so no model sees the real data. The anonymized prompt goes to more than one model, and Reliability Check scores every answer side by side.

Activity History

AI Firewall Activity History: prove every prompt was handled safely

Activity History logs every prompt, the model's response, and its compliance, privacy, and reliability assessments. Each entry shows the detected issues and the guardrail resolutions applied, the evidence trail security and compliance teams ask for.

File Sanitization

AI Firewall File Sanitization: clean documents before they reach AI tools

File Sanitization cleans uploaded files by removing malicious content, with a job history showing each run's status, owner, and type. Name a job, attach a document, and Start Sanitizing adds it to the list as Pending until processing finishes.

Keyword Policy

AI Firewall Keyword Policy: block, disguise, or preserve the words in every prompt

Safeguard Keywords blocks jailbreaks, misuse, and restricted content, and Anonymize Keywords hides private terms like a company name. Don't Anonymize Keywords keeps business terms and product names intact so prompts keep their meaning.

Workspace Settings

AI Firewall Workspace Settings: match privacy rules to the regulations you answer to

Choose a privacy level, Fictionalize or Mask as the security preference, and reliability features aimed at preventing hallucinations. Compliance settings select regulations like CCPA, HIPAA, and PCI DSS, plus sensitive keyword attributes grouped by category.

LLM Configuration

AI Firewall LLM Configuration: bring your own models without giving up control

Administrators set up the models the workspace can use, with automatic AI health checks and privacy monitoring on a lightweight ZeroTrusted.ai privacy model. Each configured model gets a card with its role, active status, and its own key.

AI Gateway Rules

AI Firewall AI Gateway Rules: take control of shadow AI

AI Gateway Rules decide which public AI tools are off limits, at the domain level, with block lists and white lists. Every rule moves through Approved, Requested, and Declined, and records its type, status, who created it, and when.

Proxy Settings

AI Firewall Proxy Settings: control what flows through the Shadow AI proxy

Proxy Settings configures trusted IP addresses, safeguard keywords, PII detection thresholds, and enforcement behavior. With Enforcement Mode set to Block, requests containing PII or keywords are blocked rather than just flagged with a warning.

Audits & Logs

AI Firewall Audits & Logs: who used AI, how, and what the firewall did

Audits & Logs brings the organization's records together: an organization-wide audit log with the guardrail resolutions for every prompt, API logs for every call, and notifications tracking every system alert that goes out.

Identity Policy Center

AI Firewall Identity Policy Center: know exactly who is using AI

Administrators invite users with specific roles, one at a time or by file upload, and can update a role, send a reset email, remove access, or suspend a user. Authorized Users lists each person's role, status, and login method.

Access and Roles

AI Firewall Access and Roles: safe AI settings every user gets automatically

Organization-wide policies cover audit logging, keyword safeguards, sanitization, compliance checks, and hallucination detection, and apply to all connected users. Roles Management starts from the default Admin, Power User, and User roles, each with its own permissions.

AI Assistant

AI Firewall AI Assistant: ground AI in your own documents, under control

The AI Assistant combines file upload with search so teams can manage and retrieve their own data through AI. Each persona shows its RAG status and approval, and a Detected PII column marks which personas have PII findings.

AI HealthCheck

AI Firewall AI HealthCheck: catch models that quietly drift

AI HealthCheck assesses the performance, reliability, and security of your AI models. Data Drift scans pair a patient model with a state-of-the-art reference model and open into a full report, and the Hallucination tab keeps its own scan history.

Developer API

AI Firewall Developer API: give your own applications the same protection

API Documentation covers Secure AI Prompt, RAG Assistant, AI HealthCheck, Audit Log, Shadow AI, and API Keys, with every parameter documented. Each API key can be scoped to specific modules and users and shows when it expires and when it was last used.