Skip to main content
Ready to use out of the box — no external credentials needed. These integrations run on TrueFoundry-managed infrastructure: you configure them in the AI Gateway; TrueFoundry operates the guardrail execution path (no third-party API keys required for the built-ins listed here). If you need a specific vendor (for example OpenAI Moderations, Azure Content Safety, Bedrock Guardrails, or Google Model Armor), use an integration from External Providers or Custom Guardrails. Among TrueFoundry guardrails, these guardrails use the following services under the hood:
These three guardrails are available only when the gateway is hosted by TrueFoundry (SaaS deployment options). They are not available when the gateway runs on your own infrastructure — this includes self-hosted and hybrid (“Gateway Plane only”) deployments, even though TrueFoundry manages the control plane in the hybrid case.For these deployments, use the following alternatives instead:

​
All TrueFoundry Guardrails

Secrets Detection

Catches and redacts credentials like AWS keys, API keys, JWT tokens, and private keys.

Code Safety Linter

Flags unsafe code patterns — eval, exec, os.system, subprocess calls, dangerous shell commands.

SQL Sanitizer

Catches risky SQL: DROP, TRUNCATE, DELETE/UPDATE without WHERE, string interpolation.

Regex Pattern Matching

Matches and redacts sensitive patterns (PII, payment cards, credentials) using built-in or custom regex.

Prompt Injection

Detects prompt injection attacks and jailbreak attempts using model-based analysis.

PII Detection

Finds and redacts personally identifiable information with configurable entity categories.

Content Moderation

Blocks harmful content across hate, self-harm, sexual, and violence categories with adjustable thresholds.

Metadata Validation

Enforces required request metadata keys and allowed values before the request proceeds.

Cedar Guardrails

Fine-grained access control for MCP tools using Cedar policy language with default-deny security.

OPA Guardrails

Fine-grained access control with full policy lifecycle management using Open Policy Agent.