PyRank
  • Search
  • PyPI
  • GitHub
  • Insights
  • Compare
  • Advisories
  • Ecosystem
  • About

Jailbreak Detection Python Packages

Python packages with the GitHub topic jailbreak-detection. Sorted by monthly downloads, with stars and forks.
hermes-labs-ai
little-canary

Detects prompt injection by its effect on a sacrificial canary model, not just pattern matching: untrusted input hits a powerless model first, a behavioral check reads the residue, and it returns block, flag, or pass before your primary model acts. Inbound preflight sensor, not a guarantee.

3K 39 9
cgrtml
reasongate

Explainable security gate for LLM apps — blocks prompt injection with an auditable reason for every decision.

2K 16 0
AICordon
aicordon

Picket: a local signature detector for prompt injection, planted and typed - no model, no network, no dependencies

1K 1 0
uptrain-ai
uptrain

UpTrain is an open-source unified platform to evaluate and improve Generative AI applications. We provide grades for 20+ preconfigured checks (covering language, code, embedding use-cases), perform root cause analysis on failure cases and give insights on how to resolve them.

1K 2K 206
0xsl1m
shadowshield

Unified open-source security shield for agentic AI systems — defense-in-depth prompt-injection protection (canary tokens, agent-trace alignment audit, tool-call guarding, PII/secret scanning).

1K 0 1
mattijsmoens
sovereign-shield

Deterministic AI defense framework: immutable input filtering, n-model cryptographic hash consensus, and self-learning adaptive rules. Zero dependencies. Hardware-sealed.

996 21 6
killertcell428
pyaigis

Get Claude Code and other AI agents approved for use at work — deterministic guardrails on every tool call, tamper-evident audit logs, and a generated IT-approval pack. Zero-dependency Python OSS.

969 53 9
AICordon
aicordon-haystack

Picket: a local signature detector for prompt injection, planted and typed - no model, no network, no dependencies

795 1 0
AICordon
aicordon-langchain

Picket: a local signature detector for prompt injection, planted and typed - no model, no network, no dependencies

794 1 0
stef41
injectionguard

Prompt injection detection for LLM applications and MCP servers. Detects jailbreaks, instruction override, encoded attacks. OWASP LLM #1 defense.

634 1 0
mattijsmoens
intentshield

Pre-execution intent verification for AI agents. Audits what your AI is about to do, not what it says. Zero dependencies, deterministic, hash-sealed.

472 21 5
bradglenn6
zerolabz-sentinel

Sub-millisecond stateless AI guardrail reverse proxy and inference security middleware. Intercepts prompt injections, jailbreaks, and credential leaks in <0.4ms.

426 1 0
maheshmakvana
llm-injection-guard

Drop-in prompt injection defense for LLM apps and AI agents — detect, block, and audit injection attacks in real time

324 0 0
vpdeva
blackwall-llm-shield-python

Blackwall LLM Shield is an open-source AI security toolkit for JavaScript and Python that protects LLM apps from prompt injection, sensitive data leaks, unsafe tool calls, and hostile RAG content with prompt sanitization, PII masking, output inspection, policy enforcement, and audit trails.

323 1 0
kirtanpatel2003
llm-thorn

🌵 Runtime semantic security layer for LLM apps — catches jailbreaks, prompt injection & data exfiltration before they reach your model. Fully local. WAF for the AI era.

297 1 0
lockllm
lockllm

Official Python SDK for LockLLM

275 0 0
DmitrL-dev
sentinel-llm-security

Open-source AI security lab: EN/RU academy, public Rust defenses, research and local input evaluation. Explore Spectorn for live protection.

252 110 18
DmitrL-dev
rlm-toolkit

Open-source AI security lab: EN/RU academy, public Rust defenses, research and local input evaluation. Explore Spectorn for live protection.

212 110 18
akshaymagapu
aisafeguard

Open-source LLM safety guardrails: prompt injection protection, PII redaction, toxicity filtering, and OpenAI-compatible AI proxy

205 1 0
yfedoseev
jailguard

Pure-Rust prompt-injection detector with 1.5MB embedded MLP classifier. 98.40% accuracy, p50 14ms CPU inference, bindings for Python/JS/Go. Apache-2.0/MIT alternative to Rebuff (archived) and Lakera Guard.

171 12 1
mattijsmoens
sovereign-shield-adaptive

Deterministic AI defense framework: immutable input filtering, n-model cryptographic hash consensus, and self-learning adaptive rules. Zero dependencies. Hardware-sealed.

151 21 6
nintechio
aitdp

AI Threat Detection Protocol — open spec, community ruleset and reference SDK for detecting prompt injection, jailbreaks, data exfiltration and tool abuse in LLM apps and AI agents.

139 0 2
lijrjyan
turnkey

Turnkey — Bring Your Own Detector. A development harness for jailbreak detection.

126 0 0
dronefreak
promptscreen

Protect your LLMs from prompt injection and jailbreak attacks. Easy-to-use Python package with multiple detection methods, CLI tool, and FastAPI integration.

94 15 8
    • Original data from PyPI, GitHub, and OSV; downloads served through ClickHouse
    • Sources & methodology