Documentation Index

Fetch the complete documentation index at: https://docs.promptguard.co/llms.txt

Use this file to discover all available pages before exploring further.

​

Why PromptGuard?

If your product uses an LLM — a chatbot, a copilot, a RAG assistant, an agent — it has a new attack surface that traditional security tools don’t cover. PromptGuard is a security layer that sits between your application and the LLM, inspecting every request and response in real time. This page explains what it protects and how to evaluate it. No code required.

​

The problem in one paragraph

LLMs follow instructions in plain language — including malicious instructions hidden in user input, documents, or tool outputs. An attacker can make your assistant ignore its rules, leak its system prompt, expose customer data, or trick an agent into taking harmful actions. Your firewall and WAF can’t see this, because the attack is the content.

​

What PromptGuard protects

PromptGuard inspects three things:

​

The top risks it addresses

1. Prompt injection — hidden instructions that hijack the model.
2. Jailbreaks — tricks that bypass the model’s safety rules.
3. Data leaks / PII exposure — sensitive data going into or out of the model.
4. Tool injection — agents manipulated into unsafe actions.
5. Multi-turn attacks — attacks spread across a conversation to evade single-message filters.

See the full threat detection reference for the complete list and detection methods.

​

How it decides — in plain language

Every request flows through escalating layers so you get speed and accuracy: fast pattern matching first, then a machine-learning classifier, then an LLM judge for the subtle cases. The result is a decision — allow, redact (strip the sensitive part and continue), or block. This is the detection pipeline. If PromptGuard itself is ever unreachable, it fails open by default — your app keeps working, so security never becomes an outage.

​

What it does not do

Being honest about scope:

• It does not replace your firewall, WAF, IAM, or endpoint security — it’s a new layer for the AI surface, alongside those.
• It does not store or train on your prompt data — it uses a pass-through model, and your LLM provider keys stay with you.
• It is not a guarantee against every novel attack — no detector is. It measurably reduces risk and gives you the audit trail to respond when something slips through.

​

Compliance at a glance

“Aligned” means PromptGuard provides the technical controls a framework requires; formal certification requires third-party audit. Full detail — data handling, audit logging, data residency — is on the Compliance & Security page.

​

Is it right for your organization?

​

Next step

Ready to try it? The Quickstart secures your first LLM call in about 5 minutes. Evaluating for a team? Talk to us.