Lakera website screenshot

Lakera

Lakera is an AI security company building runtime defenses for generative AI applications. Its flagship Lakera Guard API screens prompts and responses for prompt injection, jailbreaks, PII leakage, unsafe content, and policy violations, while Lakera Red provides automated red teaming and risk assessment for GenAI systems. Lakera follows an API-first architecture with a managed SaaS platform, regional endpoints, self-hosted deployments for regulated environments, and a free Gandalf training game that has driven much of the prompt injection research community.

Lakera publishes 3 APIs on the APIs.io network: Guard API, Health API, and Policies API. Tagged areas include AI Security, LLM Security, Prompt Injection, Guardrails, and Red Teaming.

Lakera’s developer surface includes authentication, documentation, API reference, getting-started guide, changelog, engineering blog, pricing, and 12 more developer resources.

46.8/100 developing ▬ flat Agent 31/100 agent aware Full breakdown ↓
scored 2026-08-05 · rubric v0.9.1
AccessFreeSelf serve⚡ Free to try
6 APIs 8 Features 5 Use Cases
AI SecurityLLM SecurityPrompt InjectionGuardrailsRed TeamingGenAIAPI

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-05 · rubric v0.9.1
Composite quality — 46.8/100 · developing
Contract Quality 15.0 / 25
Developer Ergonomics 7.8 / 20
Commercial Clarity 12.1 / 20
Operational Transparency 5.5 / 13
Governance 0.0 / 12
Discoverability 6.5 / 10
Agent readiness — 31/100 · agent aware
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/lakera: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 6

Individual APIs this provider publishes, each with its own machine-readable definition.

Lakera Guard

Lakera Guard is a low-latency screening API that inspects text content sent to or from LLMs and flags threats including prompt injection, jailbreaks, PII, profanity, and policy ...

Lakera Red

Lakera Red is an automated red teaming product that probes GenAI applications for jailbreaks, prompt injection, data leakage, and other adversarial failures, then produces a ris...

Gandalf

Gandalf is Lakera's free interactive game that teaches prompt injection by challenging players to extract a secret from an LLM across progressively harder defenses. It has becom...

Lakera Guard API

Screen prompts and model responses for threats

Lakera Health API

Kubernetes-style health and lifecycle probes (self-hosted)

Lakera Policies API

Policy validation (self-hosted)

Open Collections 1

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Lakera Guard API

OPEN COLLECTION

Pricing Plans 1

Published pricing tiers and plan structures.

Lakera Plans Pricing

1 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Lakera Rate Limits

2 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Features 8

Notable capabilities this provider offers.

Prompt Injection Detection

Detects direct and indirect prompt injection attempts targeting LLM-powered applications and agents.

Jailbreak Detection

Identifies attempts to bypass system prompts, safety policies, and model guardrails.

PII Detection

Screens prompts and responses for personally identifiable information leakage.

Content Moderation

Flags unsafe, toxic, or policy-violating content in user inputs and model outputs.

Custom Policies

Configurable detection policies scoped to projects, models, and use cases.

Regional Endpoints

Hosted endpoints in US, EU, and APAC regions for data residency and latency.

Self-Hosted Deployment

On-premises and VPC deployments for regulated industries that cannot send data to a SaaS.

MCP Server

Model Context Protocol server for embedding Lakera Guard into AI clients like Claude Code and Cursor.

Scroll for all 8

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Lakera Authentication

http · 1 scheme

SECURITY

Lakera Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Lakera Vulnerability Disclosure

disclosure policy published

SECURITY

Lakera Trust Center

GDPR

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Lakera Agentic Access

7 operations · 3 acting

7 operations · 3 acting

AGENTIC

Use Cases 5

What developers build with this provider.

LLM Application Guardrails

Screen inputs and outputs of chatbots, copilots, and RAG applications for prompt injection and unsafe content.

AI Agent Protection

Inspect tool inputs, retrieved context, and agent reasoning steps for indirect prompt injection.

Workforce AI Security

Govern employee use of public LLMs and prevent sensitive data exfiltration.

GenAI Red Teaming

Run automated adversarial assessments against pre-production GenAI applications.

Regulated Industry Deployments

Self-host Guard in financial services, healthcare, and government environments with strict data residency.

Integrations 6

Pre-built integrations with other platforms and tools.

OpenAI

Wrap OpenAI calls with Guard screening for input and output safety.

Anthropic

Screen prompts and responses from Anthropic Claude models.

LangChain

Drop-in callbacks and chains for integrating Guard into LangChain applications.

LlamaIndex

Screen queries and retrieved context in LlamaIndex RAG pipelines.

Model Context Protocol

MCP server for surfacing Lakera Guard inside Claude Code, Cursor, and other MCP clients.

Kubernetes

Self-hosted Helm-based deployments with health, readiness, and liveness probes.

Resources

Get Started 3

Portal, sign-up, and the first successful call

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

Build 1

SDKs, sample code, and the tooling you integrate with

Access & Security 4

Authentication, authorization, and security posture

Operate 1

Status, limits, changes, and where to get help

Commercial 1

Pricing, plans, and the legal terms of use

Company 3

The organization behind the API

Other 2

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: lakera
url: https://raw.githubusercontent.com/api-evangelist/lakera/refs/heads/main/apis.yml
name: Lakera
type: Index
accessModel:
  pricing: free
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Free · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/lakera.png
tags:
- AI Security
- LLM Security
- Prompt Injection
- Guardrails
- Red Teaming
- GenAI
- API
description: Lakera is an AI security company building runtime defenses for generative AI applications. Its flagship Lakera
  Guard API screens prompts and responses for prompt injection, jailbreaks, PII leakage, unsafe content, and policy violations,
  while Lakera Red provides automated red teaming and risk assessment for GenAI systems. Lakera follows an API-first architecture
  with a managed SaaS platform, regional endpoints, self-hosted deployments for regulated environments, and a free Gandalf
  training game that has driven much of the prompt injection research community.
created: '2026-05-23'
modified: '2026-05-23'
specificationVersion: '0.19'
apis:
- aid: lakera:lakera-guard
  name: Lakera Guard
  tags:
  - AI Security
  - Prompt Injection
  - PII Detection
  - Content Moderation
  - LLM Guardrails
  humanURL: https://docs.lakera.ai/docs/api
  properties:
  - url: https://docs.lakera.ai/docs/api
    type: APIReference
  - url: https://docs.lakera.ai/docs/quickstart
    type: GettingStarted
  - url: https://platform.lakera.ai/docs/changelog
    type: ChangeLog
  description: Lakera Guard is a low-latency screening API that inspects text content sent to or from LLMs and flags threats
    including prompt injection, jailbreaks, PII, profanity, and policy violations. The /guard endpoint returns a flagged decision
    plus optional detector breakdowns via /guard/results, and the platform exposes /policies and /projects endpoints for managing
    detection logic. Available as a managed SaaS at api.lakera.ai/v2 with regional endpoints (US, EU, APAC) and as a self-hosted
    deployment for regulated environments.
- aid: lakera:lakera-red
  name: Lakera Red
  tags:
  - Red Teaming
  - AI Security
  - Vulnerability Assessment
  - GenAI Testing
  humanURL: https://www.lakera.ai/ai-red-teaming
  properties:
  - url: https://www.lakera.ai/ai-red-teaming
    type: Documentation
  description: Lakera Red is an automated red teaming product that probes GenAI applications for jailbreaks, prompt injection,
    data leakage, and other adversarial failures, then produces a risk-based remediation report. Designed for security teams
    evaluating AI applications prior to production deployment and for ongoing assurance of agentic systems.
- aid: lakera:gandalf
  name: Gandalf
  tags:
  - Education
  - Prompt Injection
  - Training
  - Research
  humanURL: https://gandalf.lakera.ai/
  properties:
  - url: https://gandalf.lakera.ai/
    type: Documentation
  description: Gandalf is Lakera's free interactive game that teaches prompt injection by challenging players to extract a
    secret from an LLM across progressively harder defenses. It has become a primary research and training environment for
    the prompt injection community and a public funnel into the Lakera Guard ecosystem.
- aid: lakera:lakera-guard-api
  name: Lakera Guard API
  description: Screen prompts and model responses for threats
  humanURL: https://docs.lakera.ai/docs/api
  tags:
  - Guard
  properties:
  - type: OpenAPI
    url: openapi/lakera-guard-api-openapi.yml
- aid: lakera:lakera-health-api
  name: Lakera Health API
  description: Kubernetes-style health and lifecycle probes (self-hosted)
  humanURL: https://docs.lakera.ai/docs/api
  tags:
  - Health
  properties:
  - type: OpenAPI
    url: openapi/lakera-health-api-openapi.yml
- aid: lakera:lakera-policies-api
  name: Lakera Policies API
  description: Policy validation (self-hosted)
  humanURL: https://docs.lakera.ai/docs/api
  tags:
  - Policies
  properties:
  - type: OpenAPI
    url: openapi/lakera-policies-api-openapi.yml
common:
- type: AgenticAccess
  url: agentic-access/lakera-agentic-access.yml
- type: TrustCenter
  url: security/lakera-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/lakera-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/lakera-domain-security.yml
- type: Authentication
  url: authentication/lakera-authentication.yml
- type: Website
  url: https://www.lakera.ai/
- type: Documentation
  url: https://docs.lakera.ai/
- type: APIReference
  url: https://docs.lakera.ai/docs/api
- type: GettingStarted
  url: https://docs.lakera.ai/docs/quickstart
- type: ChangeLog
  url: https://platform.lakera.ai/docs/changelog
- type: Blog
  url: https://www.lakera.ai/blog
- type: Pricing
  url: https://www.lakera.ai/pricing
- type: Login
  url: https://platform.lakera.ai/login
- type: Signup
  url: https://platform.lakera.ai/
- type: GitHubOrganization
  url: https://github.com/lakeraai
- type: LinkedIn
  url: https://www.linkedin.com/company/lakeraai/
- type: Events
  url: https://www.lakera.ai/events
- type: Game
  url: https://gandalf.lakera.ai/
- type: Features
  data:
  - name: Prompt Injection Detection
    description: Detects direct and indirect prompt injection attempts targeting LLM-powered applications and agents.
  - name: Jailbreak Detection
    description: Identifies attempts to bypass system prompts, safety policies, and model guardrails.
  - name: PII Detection
    description: Screens prompts and responses for personally identifiable information leakage.
  - name: Content Moderation
    description: Flags unsafe, toxic, or policy-violating content in user inputs and model outputs.
  - name: Custom Policies
    description: Configurable detection policies scoped to projects, models, and use cases.
  - name: Regional Endpoints
    description: Hosted endpoints in US, EU, and APAC regions for data residency and latency.
  - name: Self-Hosted Deployment
    description: On-premises and VPC deployments for regulated industries that cannot send data to a SaaS.
  - name: MCP Server
    description: Model Context Protocol server for embedding Lakera Guard into AI clients like Claude Code and Cursor.
- type: UseCases
  data:
  - name: LLM Application Guardrails
    description: Screen inputs and outputs of chatbots, copilots, and RAG applications for prompt injection and unsafe content.
  - name: AI Agent Protection
    description: Inspect tool inputs, retrieved context, and agent reasoning steps for indirect prompt injection.
  - name: Workforce AI Security
    description: Govern employee use of public LLMs and prevent sensitive data exfiltration.
  - name: GenAI Red Teaming
    description: Run automated adversarial assessments against pre-production GenAI applications.
  - name: Regulated Industry Deployments
    description: Self-host Guard in financial services, healthcare, and government environments with strict data residency.
- type: Integrations
  data:
  - name: OpenAI
    description: Wrap OpenAI calls with Guard screening for input and output safety.
  - name: Anthropic
    description: Screen prompts and responses from Anthropic Claude models.
  - name: LangChain
    description: Drop-in callbacks and chains for integrating Guard into LangChain applications.
  - name: LlamaIndex
    description: Screen queries and retrieved context in LlamaIndex RAG pipelines.
  - name: Model Context Protocol
    description: MCP server for surfacing Lakera Guard inside Claude Code, Cursor, and other MCP clients.
  - name: Kubernetes
    description: Self-hosted Helm-based deployments with health, readiness, and liveness probes.
- type: LlmsText
  url: https://docs.lakera.ai/llms.txt
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com