Agent Guard, ModernBERT base (V3.2) Drop in prompt injection detection for LLM apps and agents. This classifier scores any untrusted text for injection, jailbreak, and OWASP LLM Top 10 / MITRE ATLAS attack patterns. Run it on user input, retrieved web pages, emails, and tool outputs before that text reaches your model, and a known control flow hijack gets caught at the door instead of running. It is small (149M parameters), CPU friendly, Apache 2.0, and built on answerdotai/ModernBERT base with its 8k token context, so it handles long agent traces and RAG chunks. The pip installable agent guard plugins package wraps it in one function, guard(text) , plus ready made Claude, OpenAI, Hermes, and OpenCLAW middleware. Sister model: dannyliv/agent guard deberta pi base , DeBERTa v3 base, 184M params, lower benign false positive rate. Release status: V3.2 is the live model (updated 2026 05 16) This repo now ships the V3.2 weights, replacing the prior v1.x release. V3.2 was retrained on a permissively licensed corpus (no gated AI2 datasets) with a rebalanced benign side and nine literature red team augmentation techniques. What V3.2 changed: Fixes the GCG adversarial suffix weakness. The p…
We use cookies for essential functionality and analytics. You can accept or reject analytics cookies.Cookie policy