All Products
Search
Document Center

AI Guardrails:What is Guardrails

Last Updated:Sep 14, 2026

Guardrails detects and mitigates security risks in AI systems, helping your applications deliver safe, compliant, and reliable responses to user prompts.

Product features

AI applications and AI Agents face security threats such as content compliance violations, data breaches, prompt injection attacks, hallucinations, and jailbreaks. These risks can disrupt operations and create significant compliance exposure.

Guardrails provides end-to-end protection for pre-trained large models, AI services, and AI Agents. It performs precise risk detection and proactive defense on both generative AI input and output.

  1. Risk detection capabilities

    Guardrails provides comprehensive detection, including content compliance detection, sensitive content detection, and prompt injection attack detection.

    • Content compliance detection: Reviews text inputs and outputs across multiple compliance dimensions, covering politically sensitive content, pornography and vulgarity, bias and discrimination, and harmful values. Use cases: Chatbots, AI in education, intelligent customer service, and AIGC creation platforms.

    • Sensitive content detection: Identifies personal privacy and corporate secret data in AI interactions, preventing leakage of both training and conversational data. Use cases: AI in healthcare, AI-powered financial services, and enterprise knowledge base Q&A.

    • Prompt injection attack detection: Identifies adversarial behaviors such as jailbreak commands, role-playing inducements, and system prompt tampering. Use cases: Securing command interactions for an AI Agent, defending against adversarial attacks in open-domain dialogue systems, and managing permissions for third-party plugin calls.

    • Malicious file detection: Analyzes uploaded documents such as PDF, PPT, and DOC files for hidden malicious content, including executable scripts, macro viruses, and nested attack code. Use cases: AI applications that support document uploads, such as intelligent resume parsing, contract Q&A, and enterprise knowledge base construction.

    • Malicious URL detection: Analyzes links in AI interactions in real time, identifying phishing websites, malicious redirects, and links with hidden attack payloads. Use cases: AI-powered search, web page summarization, RAG-based knowledge retrieval, and automated external operations.

    • Digital watermarking: Embeds visible or invisible watermarks into AI-generated images, ensuring AIGC content is traceable and accountable. Use cases: AIGC creation platforms, news media, government communications, and educational content generation in compliance-sensitive scenarios.

  2. Custom protection configuration

    Guardrails lets you configure granular risk detection settings. You can log on to the Guardrails console to manage detection rules and create risk detection templates.

    • Custom detection items: Configure the granular tags used for content compliance detection.

    • Custom risk thresholds: Set the hit threshold for each granular tag. Thresholds are based on the model's confidence score (0 to 100) and can be adjusted in increments of 1.

    • Custom filter words: Configure a list of sensitive words to detect and block, such as competitor names. You can add, delete, or modify words in the list.

      For detailed rules and agreements for the sensitive-word library, read the Guardrails Third-party Sensitive Word Agreement.

For more information, see the Features documentation.

Use cases

Use Guardrails for risk detection in these business scenarios:

  • Processing user prompts submitted to a generative AI model.

  • Analyzing multimodal content, including text, images, and videos, generated by a generative AI model.

  • Scanning and detoxifying the training corpus for a generative AI model.

  • Detecting risks in the inputs and outputs of an AI Agent.

FAQ

Which regions and service nodes does Guardrails support?

The Guardrails console currently supports only the China (Shanghai) region. Other regions, such as China (Beijing), are not supported. Service nodes in regions outside the Chinese mainland, such as US (Virginia), are not enabled.

How can I close or deactivate Guardrails? Are there any fees?

You cannot manually close or deactivate Guardrails after it is enabled. Guardrails uses the pay-as-you-go billing method. No fees are incurred if you do not call Guardrails APIs, regardless of whether the service is enabled.

What are the detection delays for synchronous and asynchronous Guardrails APIs?

  • Synchronous detection API calls usually complete within seconds. Test an actual call to obtain an accurate value.

  • Asynchronous detection API calls usually take about 30 seconds.

Why can prohibited content be missed, falsely detected, or not identified in plain text, and how can I improve the result?

  • If prohibited content embedded in the body is missed, provide the specific requestID and retest. The detection strategy has been adjusted for this scenario.

  • For image review (psDetector) false positives or false negatives, the model's recognition capability and algorithm limitations mean that 100% accuracy cannot be guaranteed. Provide the affected images to support optimization of algorithm parameters.

  • If plain text containing sensitive words is not identified but audio dubbing of the same content is identified, this is a multi-modal detection difference. Submit a ticket and provide a sample for investigation and upgrade.