# Lakera Guard vs NVIDIA NeMo Guardrails

| Attribute | Lakera Guard | NVIDIA NeMo Guardrails |
|---|---|---|
| **Vioscale score** | 48.3 (55% (medium)) | 61.3 (34% (low)) |
| activity.commits_last_30d | - | 55 |
| adoption.dependent_repos | - | 0 |
| adoption.github_stars | - | 7,016 |
| deployment.options | `{"cloud":true,"self_hosted":true}` | `{"cloud":true,"on_prem":true,"self_hosted":true}` |
| description.long | A cloud-native security platform designed for AI applications that intercepts both user inputs and model outputs to detect and prevent prompt injections, data leakage, jailbreaks, and compliance violations before they reach the LLM. | A Python library that protects language model-based chat applications from common vulnerabilities through modular guardrails. It supports input and output moderation, prompt injection and jailbreak detection, hallucination identification, RAG chunk validation, and integrates with multiple LLM frameworks and safety services. |
| features.capabilities | `{"architecture_model":"managed_cloud_inline_proxy","prompt_injection_and_jailbreak_blocking":true,"inbound_pii_and_credit_card_masking_redaction":true,"sub_50ms_latency_guarantees_for_proxy_routing":true,"custom_regex_and_deterministic_denylist_rulesets":true}` | `{"iso_27001":false,"soc2_type_ii":false,"pricing_model":"free_open_source","architecture_model":"open_source_python_library","rag_retrieval_chunk_poisoning_defense":true,"prompt_injection_and_jailbreak_blocking":true,"inbound_pii_and_credit_card_masking_redaction":true,"streaming_token_interception_and_chunked_eval":true,"sub_50ms_latency_guarantees_for_proxy_routing":false,"custom_regex_and_deterministic_denylist_rulesets":true,"outbound_toxicity_and_competitor_mention_blocking":true,"zero_data_retention_and_prompt_privacy_guarantees":true,"hallucination_and_topical_off_brand_drift_detection":true}` |
| integrations.count | 2 | 11 |
| integrations.list | `[{"name":"Grafana"},{"name":"Splunk"}]` | `[{"name":"OpenAI"},{"name":"LangChain"},{"name":"Hugging Face"},{"name":"vLLM"},{"name":"KServe"},{"name":"FMS"},{"name":"PrivateAI"},{"name":"Polygraf"},{"name":"NemoGuard"},{"name":"Nemotron"},{"name":"Patronus"}]` |
| language.primary | - | Python |
| market.availability | `{"primaryMarkets":[],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | - |
| platform.support | `{"web":true}` | `{"cli":true,"linux":true}` |
| pricing | `{"type":"free","freeTier":true,"sourceUrl":"https://www.lakera.ai","retrievedAt":"2026-08-21T11:09:56.803Z"}` | `{"type":"open_source","summary":"Free, open-source","freeTier":true,"sourceUrl":"https://github.com/pricing","retrievedAt":"2026-08-21T10:59:13.663Z"}` |
| pricing.free_tier | yes | yes |
| pricing.model | free | commercial |
| pricing.price_level | free | free |
| pricing.transparent | no | yes |
| release.cadence_days | - | 39 |
| release.history | - | `[{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.23.0","date":"2026-07-01T16:22:19Z","type":"stable","version":"v0.23.0"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.22.0","date":"2026-05-22T20:25:31Z","type":"stable","version":"v0.22.0"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.21.0","date":"2026-03-12T13:22:49Z","type":"stable","version":"v0.21.0"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.20.0","date":"2026-01-22T08:44:24Z","type":"stable","version":"v0.20.0"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.19.0","date":"2025-12-03T17:27:00Z","type":"stable","version":"v0.19.0"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.18.0","date":"2025-11-06T20:06:41Z","type":"stable","version":"v0.18.0"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.17.0","date":"2025-10-09T16:45:35Z","type":"stable","version":"v0.17.0"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.16.0","date":"2025-09-05T19:55:08Z","type":"stable","version":"v0.16.0"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.15.0","date":"2025-08-08T11:22:08Z","type":"stable","version":"v0.15.0"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.14.1","date":"2025-07-08T18:50:24Z","type":"stable","version":"v0.14.1"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.14.0","date":"2025-06-11T18:58:04Z","type":"stable","version":"v0.14.0"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.13.0","date":"2025-03-25T18:25:34Z","type":"stable","version":"v0.13.0"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.12.0","date":"2025-02-26T18:10:50Z","type":"stable","version":"v0.12.0"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.11.1","date":"2025-01-16T22:25:48Z","type":"stable","version":"v0.11.1"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.11.0","date":"2024-11-19T13:54:31Z","type":"stable","version":"v0.11.0"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.10.1","date":"2024-10-02T18:38:56Z","type":"stable","version":"v0.10.1"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.10.0","date":"2024-09-27T21:47:53Z","type":"stable","version":"v0.10.0"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.9.1.1","date":"2024-07-26T11:09:15Z","type":"stable","version":"v0.9.1.1"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.9.1","date":"2024-07-25T12:02:16Z","type":"stable","version":"v0.9.1"},{"url":"https://github.com/NVIDIA-NeMo/Guardrails/releases/tag/v0.9.0","date":"2024-05-10T07:51:27Z","type":"stable","version":"v0.9.0"}]` |
| security.disclosure_policy | - | yes |
| security.gdpr | yes | - |
| security.soc2 | yes | - |
| security.vulnerabilities | - | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=go&package_name=github.com%2FNVIDIA%2FNeMo-Guardrails&per_page=100","last_12m":0,"max_severity":null}` |

## Capabilities (AI Guardrails)

| Capability | Lakera Guard | NVIDIA NeMo Guardrails |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Architecture model | Managed cloud inline proxy | Open source python library |
| Prompt injection and jailbreak blocking | ✓ | ✓ |
| Inbound pii and credit card masking redaction | ✓ | ✓ |
| Outbound toxicity and competitor mention blocking | - | ✓ |
| Hallucination and topical off brand drift detection | - | ✓ |
| Sub 50ms latency guarantees for proxy routing | ✓ | ✗ |
| Custom regex and deterministic denylist rulesets | ✓ | ✓ |
| Streaming token interception and chunked eval | - | ✓ |
| Rag retrieval chunk poisoning defense | - | ✓ |
| Zero data retention and prompt privacy guarantees | - | ✓ |
| SOC2 type ii | - | ✗ |
| ISO 27001 | - | ✗ |
| Pricing model | - | Free open source |

*Source: Vioscale. Generated 2026-09-01T17:22:39.873Z. "-" = undocumented, not absent.*