LLM、エージェント、API のためのインテリジェントな脅威防止

プロンプトとレスポンスの検査

すべてのプロンプトとモデルのレスポンスはポリシー DSL を通過します。モデルやユーザーに到達する前に、プロンプト インジェクション、ジェイルブレイク、不正な命令を検出します。

インラインのデータ損失防止

PII、PHI、シークレット、機密マーキング、カスタム感度トークンは、プロンプトが境界から出る前に編集またはブロックされます。

ツール使用と関数呼び出しのガバナンス

エージェントが呼び出せるツールを許可リストに追加。引数を検査し、引数タイプを強制し、ポリシー違反が発生した瞬間にツール アクセスを取り消します。

サブミリ秒のレイテンシ

インラインまたはアウトオブバンドの展開パターン。インラインはほとんどの推論パスにミリ秒未満を追加；アウトオブバンドはユーザーへの影響なしにテレメトリを収集します。

DDoS および API 保護

AI API レイヤーで悪用者を制限、スロットル、分離。適応ルールはライブ トラフィック パターンに応じて自動調整されます。

敵対的 ML 防御

プロバイダー API とセルフホスト モデルの両方で、モデル反転、メンバーシップ推論、ポイズニングの試みを検出します。

Dashboard

AI Firewall Dashboard: see your AI usage before you secure it

The AI Security Dashboard tracks audit records, registered members, AI HealthChecks, and configured LLMs, and shows which models handle general queries, reliability and hallucination checks, and RAG. Token Usage splits the last seven days into input and output tokens.

Secure Chat

AI Firewall Secure Chat: catch sensitive data before a prompt goes anywhere

Secure Chat detects PII like a name, address, and Social Security number, stops with a compliance warning, and swaps each value for a realistic stand-in so no model sees the real data. The anonymized prompt goes to more than one model, and Reliability Check scores every answer side by side.

Activity History

AI Firewall Activity History: prove every prompt was handled safely

Activity History logs every prompt, the model's response, and its compliance, privacy, and reliability assessments. Each entry shows the detected issues and the guardrail resolutions applied, the evidence trail security and compliance teams ask for.

File Sanitization

AI Firewall File Sanitization: clean documents before they reach AI tools

File Sanitization cleans uploaded files by removing malicious content, with a job history showing each run's status, owner, and type. Name a job, attach a document, and Start Sanitizing adds it to the list as Pending until processing finishes.

Keyword Policy

AI Firewall Keyword Policy: block, disguise, or preserve the words in every prompt

Safeguard Keywords blocks jailbreaks, misuse, and restricted content, and Anonymize Keywords hides private terms like a company name. Don't Anonymize Keywords keeps business terms and product names intact so prompts keep their meaning.

Workspace Settings

AI Firewall Workspace Settings: match privacy rules to the regulations you answer to

Choose a privacy level, Fictionalize or Mask as the security preference, and reliability features aimed at preventing hallucinations. Compliance settings select regulations like CCPA, HIPAA, and PCI DSS, plus sensitive keyword attributes grouped by category.

LLM Configuration

AI Firewall LLM Configuration: bring your own models without giving up control

Administrators set up the models the workspace can use, with automatic AI health checks and privacy monitoring on a lightweight ZeroTrusted.ai privacy model. Each configured model gets a card with its role, active status, and its own key.

AI Gateway Rules

AI Firewall AI Gateway Rules: take control of shadow AI

AI Gateway Rules decide which public AI tools are off limits, at the domain level, with block lists and white lists. Every rule moves through Approved, Requested, and Declined, and records its type, status, who created it, and when.

Proxy Settings

AI Firewall Proxy Settings: control what flows through the Shadow AI proxy

Proxy Settings configures trusted IP addresses, safeguard keywords, PII detection thresholds, and enforcement behavior. With Enforcement Mode set to Block, requests containing PII or keywords are blocked rather than just flagged with a warning.

Audits & Logs

AI Firewall Audits & Logs: who used AI, how, and what the firewall did

Audits & Logs brings the organization's records together: an organization-wide audit log with the guardrail resolutions for every prompt, API logs for every call, and notifications tracking every system alert that goes out.

Identity Policy Center

AI Firewall Identity Policy Center: know exactly who is using AI

Administrators invite users with specific roles, one at a time or by file upload, and can update a role, send a reset email, remove access, or suspend a user. Authorized Users lists each person's role, status, and login method.

Access and Roles

AI Firewall Access and Roles: safe AI settings every user gets automatically

Organization-wide policies cover audit logging, keyword safeguards, sanitization, compliance checks, and hallucination detection, and apply to all connected users. Roles Management starts from the default Admin, Power User, and User roles, each with its own permissions.

AI Assistant

AI Firewall AI Assistant: ground AI in your own documents, under control

The AI Assistant combines file upload with search so teams can manage and retrieve their own data through AI. Each persona shows its RAG status and approval, and a Detected PII column marks which personas have PII findings.

AI HealthCheck

AI Firewall AI HealthCheck: catch models that quietly drift

AI HealthCheck assesses the performance, reliability, and security of your AI models. Data Drift scans pair a patient model with a state-of-the-art reference model and open into a full report, and the Hallucination tab keeps its own scan history.

Developer API

AI Firewall Developer API: give your own applications the same protection

API Documentation covers Secure AI Prompt, RAG Assistant, AI HealthCheck, Audit Log, Shadow AI, and API Keys, with every parameter documented. Each API key can be scoped to specific modules and users and shows when it expires and when it was last used.