AI GuardrailsUnclaimed

Rebuff

A system that identifies and blocks prompt injection attacks and improves its defenses based on detected attacks

Also known as
rebuff

Available worldwide · Popular in: US

What is Rebuff?

A framework that protects AI systems from prompt injection attacks through four defense mechanisms: input heuristics, LLM-based analysis, vector database pattern recognition, and canary token detection. Currently in alpha/prototype stage.

Independently observed

Rebuff pricing

We don't have Rebuff's full plan breakdown yet (its pricing page resisted automated reading). Here's what we could confirm. Always check live pricing for exact numbers.

What Rebuff does

The capabilities that matter for ai guardrails, normalised so it lines up with every alternative. “-” means we haven't confirmed it, not that it's missing.

Capabilities
Architecture model
Managed cloud inline proxy
Prompt injection and jailbreak blocking
✓
Inbound pii and credit card masking redaction
-
Outbound toxicity and competitor mention blocking
-
Hallucination and topical off brand drift detection
-
Sub 50ms latency guarantees for proxy routing
-
Custom regex and deterministic denylist rulesets
✓
Streaming token interception and chunked eval
-
Rag retrieval chunk poisoning defense
-
Zero data retention and prompt privacy guarantees
✗
SOC2 type ii
-
ISO 27001
-
Pricing model
-
Independently observed

Platform & deployment

Independently observed
Platforms
  • CLI
  • Web
Deployment
  • Self-hosted

Integrations (3)

Independently observed
  • OpenAI
  • Supabase
  • Pinecone

Security & compliance

Known vulnerabilities: 0 (0 in the last 12 months) sourcea count reflects scale & disclosure, not quality

Rebuff FAQ

Common questions about Rebuff, answered from independent, dated evidence.

What is Rebuff?

A framework that protects AI systems from prompt injection attacks through four defense mechanisms: input heuristics, LLM-based analysis, vector database pattern recognition, and canary token detection. Currently in alpha/prototype stage. It is indexed under AI Guardrails.

Source: https://github.com/pricing

Is Rebuff free?

Rebuff offers a free tier, so you can start without paying. Pricing changes often, so verify at source before relying on it.

Source: https://github.com/pricing

What platforms does Rebuff support?

Rebuff supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.

Source: https://github.com/pricing

Can Rebuff be self-hosted?

We have only confirmed a cloud / SaaS deployment for Rebuff, so it appears to be vendor-hosted. If a self-hosted option exists we have not found it documented publicly.

Source: https://github.com/pricing

What does Rebuff integrate with?

We have confirmed 3 integrations for Rebuff, including OpenAI, Supabase and Pinecone. This is what we could verify from public sources, so the vendor may support others we have not indexed.

Source: https://github.com/pricing

Is Rebuff open source?

Yes. Rebuff is published under the Apache-2.0 licence, a permissive licence that generally allows commercial use and modification. Licence terms can change between releases, so verify against the repository for the version you intend to use.

Source: https://github.com/protectai/rebuff

Where is Rebuff available?

Rebuff is available worldwide. Its primary market is the United States.

Source: https://github.com/pricing

Rebuff alternatives

Other ai guardrails we track, ranked by the same independent score.

All Rebuff alternatives, ranked →

Compare Rebuff

Side by side against other ai guardrails, attribute by attribute, with a source on every value.

Independent · unbought · dated

The vioscaleAI score: one lens on the evidence

Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for Rebuff, not the verdict.

Balanced composite 37 / 100
low · 24%
Signal contributions to the composite score
SignalScoreWeightContributionEvidence
Capabilities460.083.7✓
Stars600.052.8✓
Integrations170.050.9✓
Dependent projects50.050.3✓
Development activity00.140.0✓
Release cadence00.080.0-
Security posture00.120.0-
Package downloads00.040.0-
Security score00.050.0-
Developer Q&A activity00.140.0-

Computed . Re-weight it by intent, or see the full method.

All data & sourcesshow ↓

Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.

Activity

AttributeValueEvidence
Commits last 30d0mediumsource · 2026-10-14 · 65%

Adoption

AttributeValueEvidence
Github stars1,529highsource · 2026-10-14 · 90%
Dependent repos1highsource · 2026-10-14 · 85%

Content

AttributeValueEvidence
Faq7 itemsmediumsource · 2026-09-10 · 64%

Features

AttributeValueEvidence
CapabilitiesArchitecture model: managed_cloud_inline_proxy · Prompt injection and jailbreak blocking: Yes · Custom regex and deterministic denylist rulesets: Yes · Zero data retention and prompt privacy guarantees: Nomediumsource · 2026-10-14 · 60%

Integrations

AttributeValueEvidence
Count3mediumsource · 2026-08-21 · 60%

Language

AttributeValueEvidence
PrimaryTypeScripthighsource · 2026-10-14 · 90%

License

AttributeValueEvidence
SpdxApache-2.0highsource · 2026-10-14 · 95%

Market

AttributeValueEvidence
AvailabilityPrimaryMarkets: … · AvailabilityScope: global · AvailableCountries: … · NotAvailableCountries: …mediumsource · 2026-08-21 · 50%

Pricing

AttributeValueEvidence
Modelcommerciallowsource · 2026-10-14 · 40%
Free tierYesmediumsource · 2026-09-14 · 60%
Price levelfreemediumsource · 2026-09-14 · 60%
TransparentNomediumsource · 2026-08-21 · 60%

Release

AttributeValueEvidence
History3 itemsmediumsource · 2026-10-14 · 70%

Security

AttributeValueEvidence
VulnerabilitiesCount: 0 · Source: https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=pypi&package_name=rebuff&per_page=100 · Last 12m: 0highsource · 2026-10-14 · 90%
Trust centerhttps://github.com/securitymediumsource · 2026-10-14 · 60%
Still deciding?

Is Rebuff the right choice for you?

Tell us the job, the constraints and what you weigh most, and we will rank Rebuff against the rest of the ai guardrails we index, using the same dated evidence weighted your way.

Free to run, no account needed to start. How the evaluation works

For the makers of Rebuff

Is this your product?

This profile was built from public sources without asking you. You can take the badge below and use it anywhere, and you can claim the profile to correct anything we got wrong. Both are free, and neither moves Rebuff up or down: nobody can buy rank here, including you.

Take the badge

Live, always current, and free to use on your own site. It shows Rebuff's independent score and links back to this profile.

Rebuff, verified on vioscaleAI
HTML
<a href="https://www.vioscale.ai/software/rebuff" target="_blank" rel="noopener">
  <img src="https://www.vioscale.ai/badge/software/rebuff.svg" alt="Rebuff, verified on vioscaleAI" width="330" height="76" loading="lazy" />
</a>
Markdown, for a README →
Markdown
[![Rebuff, verified on vioscaleAI](https://www.vioscale.ai/badge/software/rebuff.svg)](https://www.vioscale.ai/software/rebuff)

Claim the profile

Verify you control the domain, then point us at the pages that state the facts about Rebuff and add your own description and media. Free, and it does not change the score.

  • Correct anything wrong, with evidence
  • Point our crawler at the pages that matter
  • Write your own description and add media
Claim Rebuff

Not the owner? How vendor profiles work

For AI & developers

This profile is machine-readable and citable. Fetch it as JSON, Markdown, or GraphQL, or via MCP.

Machine formatsMarkdownJSONGraphQLMarkdown is open. JSON and GraphQL need a free key.

Last updated . Canonical URI: https://www.vioscale.ai/software/rebuff.