Protect AI website screenshot

Protect AI

Protect AI is an AI/ML security company building defensive tooling and open-source security research for the model supply chain, large language model (LLM) applications, and runtime AI workloads. The commercial platform is anchored by three products — Guardian (AI model security and third-party model scanning across PyTorch, TensorFlow, ONNX, Keras, Pickle, GGUF, Safetensors, and 35+ formats with Hugging Face, SageMaker, MLflow, S3, Git, and Artifactory integrations), Recon (scalable AI red teaming with an attack library of 450+ known attacks against LLM applications mapped to OWASP LLM Top 10), and Layer (runtime AI security with 27 turnkey policies, eBPF and SDK collection, and DataDog/Splunk/Elastic/PagerDuty integration). Protect AI also stewards a portfolio of widely used open-source AI security projects on GitHub including LLM Guard (input/output scanner toolkit for prompt injection, PII, toxicity, secrets, and data leakage detection), ModelScan (model serialization attack scanner), Rebuff (prompt injection detector, archived May 2025), NB Defense (Jupyter notebook security), AI Exploits (real-world AI/ML vulnerability demonstrations), and Vulnhuntr (LLM-driven autonomous vulnerability discovery), plus the huntr bug bounty platform for AI/ML with over 17,000 security researchers. Protect AI was acquired by Palo Alto Networks in 2025 and is being integrated into the Prisma AIRS AI security platform. No public, programmatic developer API or OpenAPI specification is published for Guardian, Recon, or Layer at the time of this profile — integration is performed via product CLIs, SDKs, eBPF agents, and platform connectors documented behind Palo Alto Networks customer accounts.

Protect AI is profiled on the APIs.io network. Tagged areas include AI Security, ML Security, MLSecOps, AI Model Security, and AI Red Teaming.

Protect AI’s developer surface includes engineering blog, training material, documentation, YouTube channel, and 19 more developer resources.

9.6/100 minimal ▬ flat Agent 0/100 human only Full breakdown ↓
scored 2026-07-27 · rubric v0.5
0 APIs
AI SecurityML SecurityMLSecOpsAI Model SecurityAI Red TeamingLLM SecurityPrompt InjectionModel ScanningRuntime SecuritySupply Chain SecurityAI Bug BountyOpen SourceAcquiredPalo Alto Networks

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 9.6/100 · minimal
Contract Quality 0.0 / 25
Developer Ergonomics 2.2 / 20
Commercial Clarity 0.0 / 20
Operational Transparency 0.7 / 13
Governance 0.0 / 12
Discoverability 6.8 / 10
Agent readiness — 0/100 · human only
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 15
MCP Server 0 / 12
Machine-Readable Auth 0 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/protect-ai: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

Security Posture 1

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Protect Ai Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Resources

Documentation 2

Reference material describing how the API behaves

Build 1

SDKs, sample code, and the tooling you integrate with

Access & Security 2

Authentication, authorization, and security posture

Learn 2

Tutorials, courses, talks, and written guidance

Company 5

The organization behind the API

Other 11

Properties that don't map to a standard resource type

Scroll for all 11

Source (apis.yml)

apis.yml Raw ↑
aid: protect-ai
name: Protect AI
description: Protect AI is an AI/ML security company building defensive tooling and open-source security research for the
  model supply chain, large language model (LLM) applications, and runtime AI workloads. The commercial platform is anchored
  by three products — Guardian (AI model security and third-party model scanning across PyTorch, TensorFlow, ONNX, Keras,
  Pickle, GGUF, Safetensors, and 35+ formats with Hugging Face, SageMaker, MLflow, S3, Git, and Artifactory integrations),
  Recon (scalable AI red teaming with an attack library of 450+ known attacks against LLM applications mapped to OWASP LLM
  Top 10), and Layer (runtime AI security with 27 turnkey policies, eBPF and SDK collection, and DataDog/Splunk/Elastic/PagerDuty
  integration). Protect AI also stewards a portfolio of widely used open-source AI security projects on GitHub including LLM
  Guard (input/output scanner toolkit for prompt injection, PII, toxicity, secrets, and data leakage detection), ModelScan
  (model serialization attack scanner), Rebuff (prompt injection detector, archived May 2025), NB Defense (Jupyter notebook
  security), AI Exploits (real-world AI/ML vulnerability demonstrations), and Vulnhuntr (LLM-driven autonomous vulnerability
  discovery), plus the huntr bug bounty platform for AI/ML with over 17,000 security researchers. Protect AI was acquired
  by Palo Alto Networks in 2025 and is being integrated into the Prisma AIRS AI security platform. No public, programmatic
  developer API or OpenAPI specification is published for Guardian, Recon, or Layer at the time of this profile — integration
  is performed via product CLIs, SDKs, eBPF agents, and platform connectors documented behind Palo Alto Networks customer
  accounts.
type: Index
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source: []
  generated: '2026-07-22'
  method: derived
position: Provider
access: 3rd-Party
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/protect-ai.png
tags:
- AI Security
- ML Security
- MLSecOps
- AI Model Security
- AI Red Teaming
- LLM Security
- Prompt Injection
- Model Scanning
- Runtime Security
- Supply Chain Security
- AI Bug Bounty
- Open Source
- Acquired
- Palo Alto Networks
url: https://raw.githubusercontent.com/api-evangelist/protect-ai/refs/heads/main/apis.yml
created: '2026-05-25'
modified: '2026-05-25'
specificationVersion: '0.20'
apis: []
common:
- type: DomainSecurity
  url: security/protect-ai-domain-security.yml
- type: Website
  url: https://protectai.com
- type: Product
  url: https://protectai.com/guardian
- type: Product
  url: https://protectai.com/recon
- type: Product
  url: https://protectai.com/layer
- type: Blog
  url: https://protectai.com/blog
- type: Newsroom
  url: https://protectai.com/newsroom
- type: Training
  url: https://protectai.com/course-mlsecops-foundations
- type: Documentation
  url: https://protectai.com/secure-by-design
- type: BugBounty
  url: https://huntr.com
- type: ParentCompany
  url: https://www.paloaltonetworks.com
- type: ParentProduct
  url: https://www.paloaltonetworks.com/prisma/airs
- type: GitHubOrganization
  url: https://github.com/protectai
- type: OpenSource
  name: LLM Guard
  url: https://github.com/protectai/llm-guard
- type: OpenSource
  name: ModelScan
  url: https://github.com/protectai/modelscan
- type: OpenSource
  name: Rebuff (archived)
  url: https://github.com/protectai/rebuff
- type: OpenSource
  name: NB Defense
  url: https://github.com/protectai/nbdefense
- type: OpenSource
  name: AI Exploits
  url: https://github.com/protectai/ai-exploits
- type: OpenSource
  name: Vulnhuntr
  url: https://github.com/protectai/vulnhuntr
- type: Documentation
  name: LLM Guard Documentation
  url: https://llm-guard.com
- type: LinkedIn
  url: https://www.linkedin.com/company/protect-ai
- type: Twitter
  url: https://twitter.com/ProtectAICorp
- type: YouTube
  url: https://www.youtube.com/@protectai
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com