Openlayer Guardrails
openlayer.dev
What it is
Openlayer Guardrails inspects live AI inputs and outputs and can block, redact, escalate, or route policy violations for review. It targets prompt injection, jailbreak attempts, exposure of personal or health information, and harmful or toxic content. Openlayer says it detects and blocks more than 50 PII and PHI entity types inline. Teams can configure sensitive-data categories to block and topics an assistant should avoid. Guardrails are commonly enforced through the Gateway or applied directly through the SDK; connections are also available through framework integrations, a CLI, and REST API. Each decision can be recorded with its timestamp, system version, owner, supporting trace, and reason for blocking. Openlayer says guardrail activity contributes to compliance evidence and names the EU AI Act, ISO/IEC 42001, NIST AI RMF, and OSFI E-23. Deployment options include customer VPC and air-gapped environments; on-premise deployment is available on Enterprise. Basic is free, with one member, five projects, one inference pipeline per project, 20,000 monthly logs, 20 tests per project, one workspace, three months of retention, and Discord support. Enterprise pricing is custom.
Spec sheet
- What it does
- Openlayer Guardrails inspect live AI traffic and can block prompt injection, jailbreaks, sensitive-data exposure and harmful content before it reaches users.Read 21 Oct 2026 · openlayer.com
- Intended users
- Openlayer says engineering, AI, security, compliance, and finance teams use the platform, including in regulated industries such as healthcare and financial services.Read 4 Oct 2026 · openlayer.dev
- Integrations
- Openlayer advertises SDKs, a network gateway, CLI, REST API, Git, OpenTelemetry and Snowflake connectivity.Read 21 Oct 2026 · openlayer.com
- Security
- Openlayer states it has SOC 2 Type II certification and GDPR compliance, supports HIPAA-aligned use cases, and encrypts data at rest with AES-256 and in transit with TLS 1.2 or higher.Read 4 Oct 2026 · openlayer.dev
- Support
- Basic includes community support through Discord; Enterprise includes white-glove onboarding and direct Slack access to Openlayer's team.Read 4 Oct 2026 · openlayer.dev
- Founded
- 2021Read 28 Sep 2026 · openlayer.dev
- Audit evidence
- Each policy evaluation and enforcement result is recorded with decision evidence for later audit use.Read 21 Oct 2026 · openlayer.com
- Changelog update
- The 2026 changelog describes a remote OAuth-protected MCP connector usable from Claude Code and claude.ai.Read 21 Oct 2026 · openlayer.dev
- Company founding
- LinkedIn lists Openlayer as founded in 2021.Read 21 Oct 2026 · linkedin.com
- Company headquarters and size
- LinkedIn lists San Francisco, California headquarters and a company size of 11–50 employees.Read 21 Oct 2026 · linkedin.com
- Compliance evidence
- Openlayer says guardrail activity feeds into compliance evidence, and its page names the EU AI Act, ISO/IEC 42001, NIST AI RMF, and OSFI E-23.Read 4 Oct 2026 · openlayer.dev
- Data retention
- Basic retention is three months, while Enterprise retention can be customized.Read 21 Oct 2026 · openlayer.dev
- Deployment options
- Openlayer supports customer VPC, on-premise and air-gapped deployment options for enterprise use.Read 21 Oct 2026 · openlayer.dev
- Encryption and availability
- The security page states 99.9% platform availability, AES-256 encryption at rest and TLS 1.2 or higher in transit.Read 21 Oct 2026 · openlayer.dev
- Evaluation platform
- Openlayer combines pre-release testing, production monitoring and runtime policy enforcement in one platform.Read 21 Oct 2026 · openlayer.com
- Evidence logging
- Each guardrail decision can be recorded with a timestamp, system version, owner, supporting trace, and the reason a request or response was blocked.Read 4 Oct 2026 · openlayer.dev
- Framework coverage
- Traffic routed through Openlayer can be protected regardless of the underlying AI framework or model provider.Read 21 Oct 2026 · openlayer.com
- Funding and accelerator
- Y Combinator lists Openlayer as a Summer 2021 company based in San Francisco and identifies it as active.Read 21 Oct 2026 · ycombinator.com
- Gateway and SDK enforcement
- Guardrails can be enforced through Openlayer Gateway or applied directly through the SDK.Read 21 Oct 2026 · openlayer.com
- Harmful-output filtering
- Configurable policies can block toxic, harmful and malicious generated content inline.Read 21 Oct 2026 · openlayer.com
- Identity controls
- Security features include RBAC, Google SSO, SAML, OIDC and directory synchronization.Read 21 Oct 2026 · openlayer.dev
- Java SDK
- The official Java library is generated for the Openlayer REST API, supports Java 8 or later and is installable through Maven or Gradle.Read 21 Oct 2026 · github.com
- Legal entity
- The privacy policy identifies Unbox Inc. as the legal entity doing business as Openlayer.Read 21 Oct 2026 · openlayer.com
- Limit: Basic collaboration
- The Basic plan is limited to one member, which constrains free-team collaboration.Read 21 Oct 2026 · aitechsuites.com
- Limit: Basic retention
- The Basic plan retains data for only three months.Read 21 Oct 2026 · aitechsuites.com
- Limit: Enterprise gating
- On-premise deployment, explainability and SAML SSO are reserved for Enterprise customers.Read 21 Oct 2026 · aitechsuites.com
- Notable limits
- The Basic plan is limited to one member, five projects, one inference pipeline per project, 20,000 inference logs per month, and one workspace.Read 4 Oct 2026 · openlayer.dev
- PII and PHI detection
- Openlayer says its guardrails detect and block more than 50 PII and PHI entity types inline.Read 4 Oct 2026 · openlayer.dev
- PII and PHI protection
- Guardrails detect and block personally identifiable and protected health information in prompts, retrieval context and model outputs.Read 21 Oct 2026 · openlayer.com
- Policy configuration
- Policies can be customized, including which sensitive-data categories to block and which topics an assistant should avoid.Read 4 Oct 2026 · openlayer.dev
- Praise: AI Tech Suite
- The directory highlights Openlayer’s 100-plus customizable tests, LLM and traditional-ML coverage, real-time guardrails and Git/CLI/SDK integration.Read 21 Oct 2026 · aitechsuites.com
- Praise: Factchecktool reviewers
- Reviewers praise Openlayer’s timeline, collaboration, model debugging and ability to involve non-engineering stakeholders.Read 21 Oct 2026 · factchecktool.com
- Prompt-injection defense
- The product identifies prompt-injection and jailbreak attempts while requests are flowing through the system.Read 21 Oct 2026 · openlayer.com
- Python SDK API support
- The official Python library provides typed requests and responses, retry handling, timeout configuration and calls to documented or undocumented REST endpoints.Read 21 Oct 2026 · github.com
- Python SDK licence
- The official openlayer-python repository contains the Apache License 2.0 text.Read 21 Oct 2026 · github.com
- Rating on AI Tech Suite
- No rating available from 0 ratingsRead 21 Oct 2026 · aitechsuites.com
- Rating on AWS Marketplace
- 0 out of 5 from 0 reviewsRead 21 Oct 2026 · aws.amazon.com
- Rating on Factchecktool
- 5.0 out of 5 from 6 reviewsRead 21 Oct 2026 · factchecktool.com
- Rating on FeaturedCustomers
- 4.8 out of 5 from 346 reference ratingsRead 21 Oct 2026 · featuredcustomers.com
- Runtime enforcement
- Guardrails inspect live AI inputs and outputs and can block, redact, escalate, or route policy violations for review.Read 4 Oct 2026 · openlayer.dev
- Security certifications
- Openlayer states that it maintains SOC 2 Type II, GDPR and HIPAA-oriented compliance controls.Read 21 Oct 2026 · openlayer.dev
- Supported AI systems
- The platform covers LLMs, retrieval-augmented generation, autonomous agents, traditional machine-learning models and multimodal systems.Read 21 Oct 2026 · openlayer.com
- Threats covered
- Guardrails target prompt injection, jailbreak attempts, PII and PHI exposure, and harmful or toxic content.Read 4 Oct 2026 · openlayer.dev
- Where it runs
- Guardrails are commonly enforced through the Gateway and can also be applied directly through the SDK.Read 4 Oct 2026 · openlayer.dev
Plans and prices
Basic Free 1 member · 5 projects · 1 inference pipeline per project · 20,000 inference logs/month · 20 tests/project · 3-month retention · CLI, SDK and API · community support Read 21 Oct 2026 · openlayer.dev
Enterprise Priced on request Unlimited members/projects/tests · custom inference volume · team access controls · on-premise deployment · explainability · SAML SSO · 99.99% SLA · white-glove onboarding · advanced support Read 21 Oct 2026 · openlayer.dev
Strong points and limits
Strong points
- Can block, redact, escalate, or route policy violations
- Detects and blocks over 50 PII and PHI entity types
- Supports customer VPC and air-gapped deployments
- Free Basic plan includes Discord community support
Limits
- Basic is limited to one member and five projects
- Basic allows 20,000 inference logs per month
- On-premise deployment is Enterprise-only
- Enterprise pricing is custom
Who it suits
Openlayer Guardrails suits engineering, AI, security, compliance, and finance teams, including teams in healthcare and financial services. The Basic tier may suit small projects that fit its member, project, and log limits.
Verdict
Openlayer Guardrails provides configurable checks for live AI traffic and records decision details for review. Basic has defined usage limits, while on-premise deployment and expanded capacity are listed under custom-priced Enterprise.
Where Specifiction places it
- AI governance tools#4 of 568.8
- AI Governance Software#4 of 568.3
- LLM Security Tools#6 of 318.3