OpenAI Guardrails
guardrails.openai.com
What it is
OpenAI Guardrails is an open-source project for applying configurable safety and compliance checks to LLM applications by validating inputs and outputs. Its Python project is labeled Preview and available under the MIT license. Built-in checks include PII masking, moderation, jailbreak detection, off-topic prompt checks, URL filtering, and hallucination detection; prompt-injection detection for agent tool calls is experimental. The Python package supplies wrapped OpenAI clients for Chat Completions and Responses API calls and integrates with the OpenAI Agents SDK. Documentation also covers Azure OpenAI clients and OpenAI-compatible APIs, including a local Ollama example. Developers can create pipeline configurations with the Guardrails Wizard or define them as JSON, then use evaluation tools on labeled datasets. Python and TypeScript/JavaScript SDKs are listed. The Python package needs Python 3.11 or newer; configurations using Contains PII also require its spaCy model during build or deployment. Guardrails calls paid OpenAI APIs, whose charges are the developer’s responsibility. It may use third-party services such as Presidio, which OpenAI says it does not develop or verify.
Spec sheet
- Purpose
- OpenAI Guardrails adds configurable safety and compliance checks to LLM applications by validating inputs and outputs.Read 4 Oct 2026 · github.com
- Headquarters
- San Francisco, California, United StatesRead 28 Sep 2026 · guardrails.openai.com
- Founded
- 2015Read 28 Sep 2026 · guardrails.openai.com
- Maker
- OpenAI describes itself as an AI research and deployment company; it was founded in 2015 and is based in San Francisco.Read 4 Oct 2026 · openai.com
- Agents integration
- The Python SDK integrates with the OpenAI Agents SDK through GuardrailAgent.Read 4 Oct 2026 · github.com
- Availability
- The Python project is labeled Preview and is available under the MIT license.Read 4 Oct 2026 · github.com
- Checks
- Available checks include moderation, jailbreak detection, PII detection, URL filtering, secret key detection, hallucination detection, prompt injection detection, and custom prompt checks.Read 4 Oct 2026 · github.com
- Client integration
- The Python package provides drop-in replacements for OpenAI clients and integrates with the OpenAI Agents SDK.Read 4 Oct 2026 · github.com
- Configuration
- The Guardrails Wizard creates pipeline configurations that can be exported for use with the SDK.Read 4 Oct 2026 · github.com
- Evaluation
- Guardrail performance can be measured on labeled datasets using the exported configuration and the evaluation dependencies.Read 4 Oct 2026 · github.com
- Evaluations
- The Python package includes evaluation tooling for measuring guardrail performance on labeled datasets.Read 4 Oct 2026 · github.com
- Maturity
- The Python repository labels OpenAI Guardrails as a preview.Read 4 Oct 2026 · github.com
- OpenAI clients
- The Python SDK provides wrapped OpenAI clients for Chat Completions and Responses API calls.Read 4 Oct 2026 · github.com
- Other providers
- The quickstart documents Azure OpenAI clients and compatibility with OpenAI-compatible APIs, including a local Ollama example.Read 4 Oct 2026 · github.com
- Platform support
- The maker provides Python and TypeScript/JavaScript Guardrails SDKs for use in applications.Read 4 Oct 2026 · openai.github.io
- Provider compatibility
- The quickstart documents Azure OpenAI clients and compatibility with OpenAI-compatible APIs, including a local Ollama example.Read 4 Oct 2026 · github.com
- Requirements
- The Python package requires Python 3.11 or newer; configurations using Contains PII also require its spaCy model during build or deployment.Read 4 Oct 2026 · github.com
- Third-party component
- Guardrails may use third-party services such as the Presidio open-source framework, which OpenAI says it does not develop or verify.Read 4 Oct 2026 · github.com
- Third-party services
- Guardrails may use third-party services such as the Presidio open-source framework, which is subject to its own terms and is not developed or verified by OpenAI.Read 4 Oct 2026 · npmjs.com
- Usage costs
- Guardrails calls paid OpenAI APIs, and developers are responsible for the associated charges.Read 4 Oct 2026 · github.com
Strong points and limits
Strong points
- Checks include PII masking, moderation, and jailbreak detection.
- Wizard or JSON can define pipeline configurations.
- Evaluation tools measure performance on labeled datasets.
- SDKs are listed for Python and TypeScript/JavaScript.
Limits
- The Python project is labeled Preview.
- Python package requires Python 3.11 or newer.
- Paid OpenAI API charges remain the developer’s responsibility.
Who it suits
Guardrails suits developers adding configurable input and output checks to LLM applications, including those using OpenAI or compatible APIs. Teams should account for the Python requirements and charges for paid OpenAI API calls.
Verdict
OpenAI Guardrails offers configurable checks, client integrations, and evaluation tooling, but its Python package is marked Preview. Developers also need to account for runtime requirements and paid API usage.
Where Specifiction places it
- AI Guardrail Software#16 of 237.2