# Guard — Hanzo AI

> Stop prompt injection, PII leaks, and unsafe outputs before they reach your users.

hanzoai/guard

# Guard

It reads what goes into a model, and what comes back

[View on GitHub](https://github.com/hanzoai)

What it looks for

- Six shapes an injection takes01
- The things people paste by accident02
- Both directions, on purpose03
- You set the dials04
- A log that is not a second copy of the leak05
- Nothing to rewrite06

Overriding the instructions, role-play, asking for the system prompt, bypassing a rule, hiding the ask in an encoding, and reframing the context. A match returns a confidence rather than a verdict, and you decide what confidence is worth blocking.

Social security numbers, card numbers checked against the Luhn digit so a phone number is not mistaken for one, emails, phone numbers, IP addresses, and provider API keys. Each becomes a typed marker, so the model still knows a card number was there and does not lose the sentence.

The reply is read with the same detectors as the request, because the leak that matters is usually the one coming back. A machine-learning classifier for categories like violence and self-harm is available and off unless you turn it on — pattern matching is the default because it is the part that behaves the same every time.

Turn each detector on or off, set the injection threshold, add your own patterns for whatever is sensitive in your domain, and choose the marker text. Requests are rate limited per user with a token bucket, so a single caller cannot burn the budget.

Decisions are written as JSON lines with a hash of the content, not the content. Logging what you just redacted would put it in a file with weaker access control than the one you took it out of. Turn content logging on deliberately, or leave it off.

Start the proxy with your provider as the upstream and point the base URL at it. Or wrap a CLI tool over a pseudo-terminal and everything you type is filtered on its way in. Or put it in front of an MCP server and filter the tool calls.

Paste and ship

Paste this into any agent. It reads the skill manifest and calls Guard from there.

Agent promptCopy

```
Read https://hanzo.ai/skill.md and use Hanzo Guard in my project.
```

## Get started with Guard

[View on GitHub](https://github.com/hanzoai)

## Get Guard

AI guardrails

License: Apache-2.0[hanzoai](https://github.com/hanzoai)

[Deploy to Cloud](https://platform.hanzo.ai/deploy)