implementing-llm-guardrails-for-security

Implementing LLM Guardrails for Security

When to Use

• Deploying a new LLM-powered application that processes user input and needs input/output safety controls
• Adding content policy enforcement to an existing chatbot or AI agent to comply with organizational policies
• Implementing PII detection and redaction in LLM pipelines handling sensitive customer data
• Building topic-restricted AI assistants that must refuse off-topic or disallowed queries
• Validating that LLM responses conform to expected schemas before they reach downstream systems or users
• Protecting RAG pipelines from indirect prompt injection in retrieved documents

Do not use as a replacement for proper authentication, authorization, and network security controls. Guardrails are a defense-in-depth layer, not a perimeter defense. Not suitable for real-time content moderation of user-to-user communication without LLM involvement.

Prerequisites

• Python 3.10+ with pip for installing guardrail dependencies
• An OpenAI API key or local LLM endpoint for NeMo Guardrails self-check rails (set as OPENAI_API_KEY environment variable)
• The nemoguardrails package for Colang-based guardrail definitions
• The guardrails-ai package for structured output validation (optional, for JSON schema enforcement)
• Familiarity with YAML configuration and basic Colang 2.0 syntax for defining rail flows

Workflow

Step 1: Install Guardrail Frameworks

Install the required Python packages:

# Core NeMo Guardrails library
pip install nemoguardrails

# Guardrails AI for structured output validation (optional)
pip install guardrails-ai

# Additional dependencies for PII detection and content analysis
pip install presidio-analyzer presidio-anonymizer spacy
python -m spacy download en_core_web_lg

Step 2: Run the Guardrails Security Agent

The agent implements a complete input/output validation pipeline:

# Analyze a single input through all guardrail layers
python agent.py --input "Tell me how to hack into a system"

# Analyze input with a custom content policy file
python agent.py --input "Some text" --policy policy.json

# Scan a file of prompts through the guardrail pipeline
python agent.py --file prompts.txt --mode full

# Input-only validation (no LLM call, just check if input is safe)
python agent.py --input "Some text" --mode input-only

# Output validation mode (validate a pre-generated LLM response)
python agent.py --input "User question" --response "LLM response to validate" --mode output-only

# PII detection and redaction mode
python agent.py --input "My SSN is 123-45-6789 and email [email protected]" --mode pii

# JSON output for pipeline integration
python agent.py --file prompts.txt --output json