Top 23 guardrails Open-Source Projects

1. presidio

   1 21 11,243 9.4 Python

   An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports NLP, pattern matching, and customizable pipelines.

   

   Project mention: PISIGuard: Protect your personal and sensitive info when you chat with AI | news.ycombinator.com | 2026-08-03

   It's heavier and isn't designed as a browser extension, but in terms of existing software for anonymization there's stuff like https://presidio.dataprivacystack.org from Microsoft.

2. AppSignal

   www.appsignal.com sponsored

   AppSignal knows why the f*#k it crashed. Stop vibe-debugging. Every exception, every backtrace, grouped so you see patterns, not noise.

   

3. baml

   2 22 9,392 9.9 Rust

   The programming language for agents

   

   Project mention: Baml: The Programming Language for Agents | news.ycombinator.com | 2026-07-15

4. bifrost

   3 175 8,687 10.0 Go

   Fastest enterprise AI gateway (50x faster than LiteLLM) with adaptive load balancer, cluster mode, guardrails, 1000+ models support & <100 µs overhead at 5k RPS.

   

   Project mention: Things I Wish I Knew Before Shipping My First RAG Pipeline | dev.to | 2026-10-15

   Moving a Retrieval-Augmented Generation (RAG) pipeline from a local prototype to a production environment introduces unexpected failure modes across document chunking, retrieval accuracy, infrastructure latency, and API rate limits. While introductory tutorials demonstrate semantic search with five lines of framework code, live systems face corrupt source documents, out-of-order document sections, and unpredictable downstream provider failures. To keep generation reliable under heavy load, engineering teams route their model requests through Bifrost, an open-source AI gateway written in Go by Maxim AI that delivers unified routing, automatic fallbacks, and sub-millisecond execution overhead.

5. Guardrails

   4 15 7,270 9.6 Python

   NeMo Guardrails is an open-source toolkit for easily adding programmable guardrails to LLM-based conversational systems. (by NVIDIA-NeMo)

   

   Project mention: NeMo Guardrails vs Guardrails AI: The Production Latency Benchmark We Could Not Honestly Complete | dev.to | 2026-09-29

   For NeMo, we anchored the reproducibility audit to the pinned official benchmark README. That benchmark runs the Guardrails service with separate mock application and content-safety endpoints. It is CPU-only, does not require a GPU or hosted-model access, and exposes controllable latency distributions.

6. superagent

   5 2 6,763 7.7 TypeScript

   Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers. (by superagent-ai)

   

   Project mention: Show HN: Local Privacy Firewall-blocks PII and secrets before ChatGPT sees them | news.ycombinator.com | 2025-12-09

7. stop-that-shit

   6 1 2,537 8.9 JavaScript

   Stop That Shit（别再造史了）｜面向 Codex/GPT 场景的多平台 Hook + Skill Guard：拦截 AI coding agent 无需求的哈希、校验和与任务范围膨胀。 A multi-platform Hook + Skill Guard for AI coding agents in Codex/GPT workflows: stop unrequested hashes, checksums, and task-scope creep.

   

   Project mention: Show HN: Stop That Shit – a guard against unrequested hashes from coding agents | news.ycombinator.com | 2026-08-29

8. llmgateway

   7 6 1,686 10.0 TypeScript

   Route, manage, and analyze your LLM requests across multiple providers with a unified API interface.

   

   Project mention: Smart Routing Benchmark: Cost and Quality | dev.to | 2026-09-26

   We built Smart Routing and ran this evaluation ourselves. The runner and analysis scripts are available for inspection and reproduction.

9. SaaSHub

   www.saashub.com sponsored

   SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

   

10. ragbits

    8 2 1,674 9.0 Python

    Building blocks for rapid development of GenAI applications

    

11. OpenAPPA

    9 5 1,566 9.8 Rust

    Deterministic guardrails that don't break agents

    

    Project mention: An AI agent guard claims zero successful attacks. I re-ran its tests. | dev.to | 2026-10-12

    A guard, often called a guardrail, sits between the agent and its tools and decides, one action at a time, what may run. OpenAPPA is an open-source guard from Archestra, with about 1,550 stars on GitHub and a research paper. Its README says: "No scored attack succeeded against OpenAPPA in 1,320 evaluations, while it completed 88–90% of tasks." Its evaluation page puts the extra cost at 4.22%.

12. harness-score

    10 7 550 9.0 TypeScript

    Your AI coding agent is only as reliable as the harness around it. Measure that harness in seconds with harness-score.

    

    Project mention: Your Repo Has Tests. Can Your AI Agent Find the Command? | dev.to | 2026-10-05

    The guide is at paladini.github.io/harness-score. The source is paladini/harness-score.

13. awesome-azure-policy

    11 1 546 5.7

    A curated list of blogs, videos, tutorials, code, tools, scripts, and anything useful to help you learn Azure Policy - by @JesseLoudon

    

14. agent-control

    12 4 324 9.3 Python

    Centralized agent control plane for governing runtime agent behavior at scale. Configurable, extensible, and production-ready.

    

    Project mention: Reading list (29th March to April 20th) | dev.to | 2026-04-20

    Enforce runtime guardrails through a centralized control layer—configure once and apply across all agents. Agent Control evaluates inputs and outputs against configurable rules to block prompt injections, PII leakage, and other risks without changing your agent’s code. - link [tool] - ( Added: 2026-03-31 08:12:52 )

15. Doberman-Core

    13 9 279 9.8 Python

    Your AI's guard dog. Doberman sits at runtime, gating every input, output and tool call to stop unsafe or unintended actions before they execute.

    

    Project mention: Read the approval split before trusting an agent-security benchmark | dev.to | 2026-10-01

16. ai-gateway

    14 2 264 8.9 Go

    Unified AI Gateway for 30+ LLMs (OpenAI, Anthropic, Bedrock, Azure etc) with Caching, Guardrails, A/B test & cost controls. Go-native Fastest & Scalable AI Gateway LiteLLM & Kong AI Gateway alternative. (by ferro-labs)

    

    Project mention: AI Gateways Are Not I/O-Bound Proxies I Benchmarked 5 of Them to Prove It | dev.to | 2026-03-26

    I built Ferro Labs AI Gateway, so I have a stake in this argument. That is also why I ran the benchmark: to understand exactly where different architectures break under pressure, including my own. I profiled five open-source AI gateways with flamegraphs and traced each failure mode to its root cause. The results surprised me.

17. humanbound

    15 7 192 9.3 Python

    Open-source adversarial testing engine, SDK, and CLI for AI agents. Runs locally or against the Humanbound Platform.

    

    Project mention: Google's Gemini breakout and what Google's own vulnerability data says about agents | dev.to | 2026-10-12

    Humanbound's engine, SDK and CLI are open source (Apache-2.0): star the repo and read the code at https://github.com/humanbound/humanbound. To run adversarial tests against your own agents, sign up for the free Community plan at https://app.humanbound.ai

18. agent-kernel

    16 6 192 9.6 Python

    The Operating System for Scalable Enterprise AI Agents - Run, orchestrate, and deploy Compliant Enterprise AI Agents at scale across frameworks, without lock-in, rewrites or fragile glue code. Native support for MCP, A2A. Interface with all mainstream communication channels seamlessly out of the box, production ready from day one. (by yaalalabs)

    

    Project mention: Scheduled Tasks in Agent Kernel: Work That Runs Without Anyone Asking | dev.to | 2026-10-06

    Runnable example: examples/api/schedule-openai

19. orloj

    17 3 123 9.3 Go

    An orchestration runtime for multi-agent AI systems. Declare agents, tools, and policies as YAML; Orloj schedules, executes, routes, and governs them for production-grade operation.

    

    Project mention: We tried every multi-agent framework — then built our own runtime | dev.to | 2026-04-09

    Website: https://orloj.dev

20. AgentOS

    18 1 117 - TypeScript

    Build autonomous AI agents with adaptive intelligence and emergent behaviors to simulate any scenario. Multimodal RAG included. (by framersai)

    

    Project mention: Show HN: Paracosm – simulate what-if scenarios with AI agents | news.ycombinator.com | 2026-05-05

21. jevals

    19 1 104 5.7 Python

    Agent evals and guardrails as Jev decisions: one request per trace, a fraction of a cent, fast enough for the agent loop. Runs locally with Kev or Laya.

    

    Project mention: Show HN: Jevals – replacing LLM judges with typed Jev decisions | news.ycombinator.com | 2026-09-20

22. SIMURG

    20 5 101 7.8 Python

    Free web-search for your AI agents and zero-leak online detection of LLM hallucination — catch repetition loops, language drift and garbage mid-stream, before the user sees a bad token. Works with any OpenAI-compatible API.

    

    Project mention: SIMURG: A Guard That Catches LLM Hallucinations Mid-Stream and Heals Them | dev.to | 2026-09-22

    These are not model-intelligence failures. They are decoding failures, and they are detectable while the stream is still open. That is the entire premise of SIMURG: a streaming integrity monitor that watches every token as it arrives and raises a calibrated alarm within roughly 600 characters of the corruption onset — before the user has read the garbage.

23. rm-safely

    21 2 100 7.9 Shell

    'rm' safely – a safety net for rm

    

24. agentjail

    22 1 96 9.9 Go

    Policy guardrails for coding agents (Claude Code, Codex, Cursor) — every tool call is checked locally, before it runs. (by LuD1161)

    

    Project mention: Show HN: Conduct, open-source guardrails for LLM and MCP tool calls | news.ycombinator.com | 2026-08-28

25. arthur-engine

    23 2 91 9.9 Python

    Make AI work for Everyone - Monitoring and governing for your AI/ML

    

    Project mention: Top 5 AI Agent Governance Platforms in 2026 | dev.to | 2026-08-22

    Arthur AI launched its Agent Discovery and Governance platform in December 2025, and the thing I find genuinely interesting about it is that it is framework-neutral in a category that mostly is not.

26. SaaSHub

    www.saashub.com sponsored

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    

guardrails related posts

• An AI agent guard claims zero successful attacks. I re-ran its tests.

  2 projects | dev.to | 12 Oct 2026

• Show HN: ArchKeel – Keep AI-generated systems maintainable and explainable

  1 project | news.ycombinator.com | 10 Oct 2026

• Contract clauses with quotes you can check: an LLM proposes, solvi keeps only what is in the text

  2 projects | dev.to | 10 Oct 2026

• Agents Need Guardrails, CSS Likes More, Kafka Moves In

  1 project | dev.to | 8 Oct 2026

• Product matching: let code read the offers, let a head decide, and enforce one counterpart per product

  2 projects | dev.to | 8 Oct 2026

• Securing AI agents in your infrastructure: a sandbox is only the first layer

  2 projects | dev.to | 2 Oct 2026

• Archestra-AI/OpenAPPA: Deterministic guardrails that don't break agents

  1 project | news.ycombinator.com | 30 Sep 2026
• A note from our sponsor - AppSignal
  www.appsignal.com | 15 Oct 2026

  Stop vibe-debugging. Every exception, every backtrace, grouped so you see patterns, not noise. Learn more →

Index

Sponsored

AppSignal knows why the f*#k it crashed.

Stop vibe-debugging. Every exception, every backtrace, grouped so you see patterns, not noise.

www.appsignal.com