AgentGuards - Self-Hosted LLM Guardrails and AI Governance
Screen prompts and model output for injection, jailbreaks, PII and secrets inside your own VPC. Includes a governance console with role-based access, risk tiers and an auditable decision trail. Nothing you send it ever leaves your network.
- Category
- AI Security
- Registry category
- Cybersecurity & ITIT Operations & Infrastructure
- Vendor
- Agentguards
- Location
- Not disclosed
- Reviews
- Not rated (0 reviews on the listing)
- Listed on
- AWS Marketplace
- Pricing
- 8 plans listed
Each fact carries one Provenance score: the average of its Disclosure and Evidence scores, the same rule the page uses for the overall score. Click any score to see the math behind it.
Vendor Provenance
Who actually operates this agent.
Build Provenance
What the agent is built on.
Reach Provenance
How the agent is distributed and adopted.
Data Provenance
What the vendor discloses about data handling.
Compliance Provenance
What standards the vendor meets, and who verified them.
What the publisher says
AgentGuards sits between your applications and any LLM provider and enforces policy on the way in and the way out - as a single appliance running in your own AWS account.
Input screening: Every request is checked for prompt injection, jailbreak attempts, data-exfiltration patterns, personal data, credentials and secrets, toxicity, and topics you have placed off-limits. Alongside the transparent pattern-based checks, the image bundles a fine-tuned prompt-injection classifier that runs locally on CPU - no GPU, no external inference service.
Output validation: Model responses are checked before they reach your users, for leaked personal data or credentials, schema conformance, citation and grounding requirements, and your own content policy.
Show the rest of the publisher’s description (3 more lines)
Agent action governance: Shell commands an agent proposes are risk-scored before they run, so a destructive or credential-reading command can be blocked or held for approval rather than discovered afterwards.
A governance console, not just a filter: Every decision is recorded with a deterministic risk tier and mapped to OWASP LLM Top 10 and MITRE ATLAS categories. Administrators get role-based access with optional SSO, a review queue for high-risk refusals, a prompt tester for validating rules before deployment, retention controls, and an inventory that discovers which models and tools are actually in use - including the ones nobody told you about.
Deployed as an appliance you control: Launch it in a private subnet, reach it over HTTPS on your own network, and point your agents at it. It generates its own credentials on first boot - no secret ships in the image - and every check runs on the instance. The only outbound connection AgentGuards requires is AWS License Manager, to verify your subscription.
Plans and pricing
8 plans listed
Linked repositories
Unknown
Unknown means this listing does not publish a repository. It is not a statement that the code is closed.
Sources
- Marketplace listingAWS Marketplace (opens in a new tab)
- Legal linkCustomEula (opens in a new tab)
Reading the score
Disclosure · how many sources corroborate it
Evidence · what kind of evidence backs it
The SettleTop steps above are possible but not automated yet, so today they sit open and a perfect 10 is out of reach. Open information like firmographics and reach has fewer steps to climb, so it sits a little higher for the same visible evidence.
Information shown here reflects the best available information at the time of assessment and may be incomplete, outdated, or subject to change. It should be independently verified before being relied upon for any decision. SettleTop is not liable for any errors, omissions, or decisions made in reliance on this information.
Have information about this agent?
Send it to us for consideration
Spot something missing, wrong, or out of date? Share what you know. Every note reaches our team. It does not change the passport by itself: we review it first.