Start with the runtime. Add the console when the operating model calls for it.
This section is organized around adoption stages rather than product marketing. Use the runtime-first guides to get running locally, deploy in production, wire the SDKs into your app, and decide which control plane model fits your team.
Start here
These pages are the shortest path from evaluation to production rollout.
Reference
Use these pages when you need deployment guidance, data-handling clarity, or an architectural view for security review and procurement.
Built-in detectors
The runtime ships with these detectors. Compose them into policies, mix with your own detectors, and apply on input, output, tool calls, or streaming responses.
PII
Input & OutputDetect and redact personally identifiable information across emails, phone numbers, addresses, IDs, and more.
Secrets
Input & OutputCatch leaked API keys, tokens, credentials, and other sensitive material before they reach a model or a downstream system.
Prompt injection
InputIdentify prompt-injection patterns and adversarial instruction chains aimed at overriding your application prompt.
Jailbreak
InputRecognize jailbreak templates and evasion attempts that try to bypass policy controls.
Toxicity
Input & OutputFlag abusive, hateful, or harassing content across both user input and model output.
Profanity
Input & OutputFilter profanity with configurable severity thresholds per project and environment.
Topic control
Input & OutputKeep conversations within allowed topic boundaries or block specified off-topic areas.
Language
Input & OutputEnforce language restrictions and detect unexpected or unsupported languages in traffic.
Competitor mentions
OutputPrevent model responses from referencing competitor names or products you have excluded.
Hallucination signals
OutputSurface low-confidence or unsupported claims in responses for review or blocking.
Code safety
OutputDetect insecure code patterns, shell-escape risks, and dangerous suggestions in code responses.
URL and domain control
Input & OutputBlock, allow, or inspect URLs and domains referenced inside prompts and responses.
Operating model by plan
The product boundary is simple: the runtime is always self-hosted, while the console changes by plan.
Starter
Open-source runtime only. You self-host it, manage policy files locally, and use docs-based onboarding.
Growth
Self-hosted runtime plus hosted console. The console adds policy workflow and metadata-first operational visibility.
Enterprise
Custom deployment support, including the option to self-host both runtime and console.