AI-specific content security
Dual-phase prompt and response filtering, purpose-built for the threat surface an LLM proxy introduces.
- Prompt injection and jailbreak detection, classified by threat type (prompt_injection, jailbreak, data_extraction, system_prompt_leak, credential_harvesting) and severity.
- Dual-phase PII/PCI content filtering on both inputs and outputs, combining regex patterns with optional Presidio-based NER.
- Retrieved memory context is wrapped with structural delimiters and treated as data, never instructions, mitigating indirect prompt injection via memory.