# Lakera AI visibility in LLM Security & AI Guardrails

Canonical: https://devtune.ai/verticals/llm-security-guardrails/lakera

[Website](https://www.lakera.ai/)

Latest AI responses: 2026-11-14
[Tracked on paid plans](https://devtune.ai/pricing): Google AI Mode, Microsoft Bing Copilot Search, Claude with web search, Grok Search
Prompts: 25
Runs: 3


## Platforms

- google-ai
- perplexity
- chatgpt-search

Rank: 1
Joint rank: true
Total brands: 7
Measured responses: 75
Presence percent: 18.666666666666668
Share of voice percent: 67.85714285714286
Average position: 4.7105263157894735
Docs presence percent: 0
Blog presence percent: 0
Brand mention percent: 54.666666666666664


## Profile

Overview: Lakera is an AI security company founded in 2021 in Zurich, with a presence in San Francisco. It is known for Lakera Guard, a real-time, model-agnostic runtime protection API for LLM applications, and Lakera Red, which handles red teaming and risk assessment. It also created Gandalf, a widely used prompt-injection game that feeds its threat intelligence. Its platform covers prompt attacks, data leakage, content violations, malicious links and off-policy agent behavior. It also offers agent discovery, risk assessment and workforce AI security. Lakera raised about $30M, including a $20M Series A led by Atomico in 2024. Check Point Software announced its acquisition in September 2025, and third-party sources say it closed in October 2025. Lakera's technology now sits within Check Point's AI Security offerings, and the lakera.ai site and docs show Check Point branding.
Product summary: Lakera (now part of Check Point AI Security) provides a platform for securing GenAI applications and agents. It combines AI Guardrails/Lakera Guard (runtime screening via API of prompts, outputs, tool calls and tool responses), AI Agent Security (agent discovery and risk assessment), AI Red Teaming (Lakera Red) and Workforce AI Security (shadow AI discovery and data protection in prompts). A dashboard offers analytics, logs, policies and projects.


### Key capabilities

- Runtime prompt-attack detection (prompt injection and jailbreaks)
- Data leakage and PII prevention in prompts and outputs
- Content moderation, with multilingual detection
- Malicious and unknown link detection
- Agent behavior defense (Dangerous Deviation detector, tool allow/deny list)
- AI agent discovery and per-agent risk assessment, mapped to OWASP and MITRE ATLAS
- AI red teaming and risk-based vulnerability assessment (Lakera Red)
- Custom policies and guardrails, with dashboard analytics and logs
- Workforce AI security: shadow AI discovery and prompt data protection
- SaaS or self-hosted deployment (enterprise)



### Target users

- Security teams (CISOs, AppSec and AI security)
- AI/ML and GenAI application developers
- Enterprises deploying LLM apps and AI agents
- SaaS and fast-growth startups building GenAI products



### Key use cases

- Protecting LLM applications and chatbots from prompt injection and jailbreaks
- Preventing leakage of PII and sensitive data through GenAI apps
- Securing AI agents, including tool calls and MCP servers
- Red teaming GenAI applications before deployment
- Discovering and governing shadow AI use by employees
- Meeting security and compliance expectations for enterprise GenAI, such as the OWASP LLM Top 10

Integrations ecosystem: Lakera Guard is model-agnostic and integrates through a Guard API (a POST request to the guard endpoint). Agent discovery connects to Amazon Bedrock/AgentCore, Google Cloud, Microsoft Copilot Studio, Salesforce Agentforce, n8n and Relevance AI. Enterprise plans add SIEM integration, SSO and RBAC. Check Point plans to integrate Lakera into its GenAI Protect product and its wider security infrastructure. Docs say native platform runtime integrations are on the roadmap.
Pricing summary: Lakera Guard has two published plans. Community is $0 per month and includes 10k requests per month, 8k-token prompts, SaaS hosting, EU data residency, dashboards and community support. Enterprise is custom-quoted. It offers flexible request volume, configurable prompt size, SaaS or self-hosted deployment, EU/US residency, SSO, RBAC, SIEM integration and enterprise support. No Enterprise price is published.
Review summary: Public review coverage is thin. Aggregator sites report a single G2 review (5.0), and no verified first-party platform scores were found. Third-party summaries note strengths in prompt-injection defense, simple integration and low latency. They also note weaknesses in pricing transparency and sparse independent reviews.
Competitive positioning: Lakera started as an API-first runtime guardrail (Lakera Guard) for LLM apps, with a red-teaming product (Lakera Red). It has since been folded into Check Point's AI Security portfolio. Its public material stresses low-latency runtime screening, multilingual detection, and threat intelligence from the Gandalf red-teaming game. The portfolio now also covers agent discovery, risk assessment, and workforce AI security. Compared with other vendors in this vertical, it is now part of a large network-security vendor rather than an independent startup. The sources reviewed do not offer independent head-to-head benchmarks.
Limitations: Lakera now ships as a Check Point product line, so roadmap and packaging follow Check Point's AI security bundle. The free Community plan is capped at 10k requests per month and 8k-token prompts, with SaaS only, EU data residency and community support. SSO, RBAC, SIEM integration and self-hosting need an Enterprise quote, and no Enterprise price is published. Public independent review volume is thin. Docs say native platform runtime integrations are still on the roadmap.


### Source urls

- https://www.lakera.ai/
- https://docs.lakera.ai/guard
- https://docs.lakera.ai/docs/agent-security
- https://docs.lakera.ai/docs/platform
- https://docs.lakera.ai/docs/quickstart
- https://platform.lakera.ai/pricing
- https://www.lakera.ai/blog/lakera-guard-fall-25-adaptive-at-scale
- https://www.prnewswire.com/news-releases/lakera-raises-20m-series-a-to-secure-generative-ai-applications-302204874.html
- https://techcrunch.com/2024/07/24/lakera-which-protects-enterprises-from-llm-vulnerabilities-raises-20m/
- https://www.crn.com/news/security/2025/check-point-to-buy-ai-cybersecurity-startup-lakera-to-boost-agentic-ai-security
- https://www.aitoday.io/check-point-adds-ai-application-defense-lakera-purchase-a-29460
- https://www.aitechscene.com/companies/lakera
- https://druce.ai/governance/wiki/vendors/lakera
- https://www.rfp.wiki/it-security/application-security-testing/application-security-testing/lakera
- https://ai.g2.com/marketplace/tools/lakera-guard

Research approved: 2026-11-05T14:14:47.136+00:00


### Customer outcomes





### Reviews breakdown





### Review themes



#### Praised

- Real-time prompt-injection defense
- Simple, fast API integration
- Low-latency runtime posture



#### Criticized

- Enterprise pricing and deployment details not transparent
- Sparse independent review coverage
- Narrower than full application security suites




### Company facts

Founded year: 2021
Hq: Zurich, Switzerland (also San Francisco, USA)


#### Founders

- David Haber
- Mateo Rojas-Carulla
- Matthias Kraft

Employees range: ~60 (at 2025 acquisition)
Total funding: $30M
Valuation: Not available
Arr: Not available
Customer count: Not available
Status: Acquired by Check Point Software (NASDAQ: CHKP), announced S


Readiness: Not available


## Ranking

| Display name | Pair count | Total pairs | Presence percent | Avg position |
| --- | --- | --- | --- | --- |
| Lakera | 14 | 75 | 18.666666666666668 | 4.7105263157894735 |
| HiddenLayer | 5 | 75 | 6.666666666666667 | 6.8 |
| Guardrails AI | 2 | 75 | 2.666666666666667 | 3.5 |
| Noma Security | 2 | 75 | 2.666666666666667 | 4.75 |
| Lasso Security | 1 | 75 | 1.3333333333333335 | 3.5 |
| Arthur Shield | 0 | 75 | 0 | Not available |
| Prompt Security | 0 | 75 | 0 | Not available |



## Platform breakdown

| Platform | Prompt count | Presence rate |
| --- | --- | --- |
| google-ai | 0 | 0 |
| perplexity | 3 | 12 |
| chatgpt-search | 11 | 44 |



## Strengths

| Prompt text | Platform count | Avg position |
| --- | --- | --- |
| Which LLM security tools work with any model provider and orchestration framework, so we can switch models without changing protection? | 2 | 1 |
| Which prompt injection protection tools can a small team put in front of a customer-facing chatbot this week without a long sales process? | 1 | 1 |
| Which AI security platforms are easiest to deploy as a drop-in layer without rewriting an existing LLM application? | 1 | 1 |
| Which LLM security products offer a self-hosted or private deployment for a regulated company that can't send prompts to a third-party cloud? | 1 | 1 |
| Which AI guardrail tools give application developers a simple API and clear verdicts, so they can act on a flagged prompt without guessing? | 1 | 1 |



## Gaps

| Prompt text | Competitor presence count |
| --- | --- |
| Which platforms scan third-party and open-source models for backdoors or malicious code before we deploy them? | 2 |
| Which open-source guardrail frameworks give engineers full control over validation rules and are production-ready? | 1 |
| What are the best platforms for controlling AI agents' tool calls, including blocking risky actions when they connect to MCP servers? | 1 |



## Topic scores

| Topic name | Prompt count | Cited prompt count |
| --- | --- | --- |
| Capability | 5 | 2 |
| Developer Experience | 5 | 2 |
| Integrations & Ecosystem | 5 | 3 |
| Performance & Reliability | 5 | 2 |
| Setup & First Run | 5 | 3 |



## Prompt results

- Prompt text: What are my options for LLM guardrails with a free tier so a startup can test jailbreak and data-leak screening before paying?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Guardrails AI | 6 |



##### Chatgpt-search




- Prompt text: What LLM security platforms let non-ML security analysts tune policies and review blocked requests in a dashboard?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: 3



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 3 |


- Prompt text: Which LLM security tools avoid lock-in by supporting open policy formats and exporting detection logs?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: Which LLM security tools work with any model provider and orchestration framework, so we can switch models without changing protection?


#### Brand position by platform

Google-ai: Not available
Perplexity: 1
Chatgpt-search: 1



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Lakera | 1 |



##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |
| Lasso Security | 3 |


- Prompt text: Which open-source guardrail frameworks give engineers full control over validation rules and are production-ready?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Guardrails AI | 1 |



##### Chatgpt-search




- Prompt text: Which prompt injection protection tools can a small team put in front of a customer-facing chatbot this week without a long sales process?


#### Brand position by platform

Google-ai: Not available
Perplexity: 1
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Lakera | 1 |



##### Chatgpt-search




- Prompt text: Which AI security platforms are easiest to deploy as a drop-in layer without rewriting an existing LLM application?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: 1



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |


- Prompt text: Which LLM security products offer a self-hosted or private deployment for a regulated company that can't send prompts to a third-party cloud?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: 1



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |


- Prompt text: What are the best AI firewalls for enterprises that need to enforce policy inline across multiple model providers without becoming a bottleneck?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: 7



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 7 |


- Prompt text: What are the best AI security platforms for a company already standardized on a large network security vendor's ecosystem?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: What AI security platforms have published benchmarks or independent testing for prompt injection detection accuracy?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: Which LLM security products detect and redact sensitive data such as PII and secrets in both prompts and model outputs?


#### Brand position by platform

Google-ai: Not available
Perplexity: 1
Chatgpt-search: 4



#### Platform rows



##### Google-ai





##### Perplexity

| Display name | Position |
| --- | --- |
| Lakera | 1 |



##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 4 |


- Prompt text: Which AI security vendors keep detection up to date as new jailbreak techniques appear, and how do they prove it?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| HiddenLayer | 5 |


- Prompt text: Which runtime AI protection tools scale to millions of requests per day and stay available if a screening call fails?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: 2



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 2 |


- Prompt text: Which AI guardrail tools give application developers a simple API and clear verdicts, so they can act on a flagged prompt without guessing?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: 1



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |


- Prompt text: Which AI security tools detect indirect prompt injection hidden in documents, web pages and emails that an AI agent reads?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: 1



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |
| HiddenLayer | 2 |


- Prompt text: Which platforms scan third-party and open-source models for backdoors or malicious code before we deploy them?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai

| Display name | Position |
| --- | --- |
| HiddenLayer | 1 |



##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| HiddenLayer | 1 |


- Prompt text: What are the best AI security tools that produce actionable red-team reports a product team can fix, not just a list of failures?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: What should I look at when choosing a first AI security tool for a company just rolling out an internal AI assistant to employees?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: Which AI security platforms keep false positives low so legitimate user prompts aren't blocked and support tickets don't pile up?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search




- Prompt text: What are the best platforms for controlling AI agents' tool calls, including blocking risky actions when they connect to MCP servers?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai

| Display name | Position |
| --- | --- |
| Noma Security | 1 |



##### Perplexity





##### Chatgpt-search




- Prompt text: Which AI security products integrate with an existing LLM gateway or proxy to apply policies centrally?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: 1



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Lakera | 1 |


- Prompt text: What AI guardrail platforms send alerts into our existing SIEM and security operations workflow?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: 2



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| HiddenLayer | 1 |
| Lakera | 2 |


- Prompt text: What are my options for tools that discover which AI apps, models and agents employees are using across the company, and enforce policies on them?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search

| Display name | Position |
| --- | --- |
| Noma Security | 5 |


- Prompt text: Which LLM guardrail services add the least latency to each request, so a real-time chat or voice experience isn't slowed?


#### Brand position by platform

Google-ai: Not available
Perplexity: Not available
Chatgpt-search: Not available



#### Platform rows



##### Google-ai





##### Perplexity





##### Chatgpt-search







## Top sources

| Url | Title | Domain | Logo url | Source vertical | Content type | Citation count | Last30d count |
| --- | --- | --- | --- | --- | --- | --- | --- |
| https://docs.lakera.ai/guard | Introduction to AI Agent Security \| Check Point AI Security | docs.lakera.ai | Not available | commercial | documentation | 18 | 18 |
| https://docs.lakera.ai/docs/platform | AI Guardrails Dashboard \| Check Point AI Security | docs.lakera.ai | Not available | commercial | documentation | 7 | 7 |
| https://docs.lakera.ai/docs/integration | AI Guardrails Integration Guide \| Check Point AI Security | docs.lakera.ai | Not available | commercial | documentation | 6 | 6 |
| https://docs.lakera.ai/docs/api | API Overview | docs.lakera.ai | Not available | commercial | documentation | 4 | 4 |
| https://docs.lakera.ai/docs/selfhosting | Self-hosting AI Guardrails | docs.lakera.ai | Not available | commercial | documentation | 4 | 4 |
| https://docs.lakera.ai/docs/prompt-defense | Prompt Defense \| Check Point AI Security | docs.lakera.ai | Not available | commercial | documentation | 4 | 4 |
| https://www.lakera.ai/risk/prompt-injection-attacks | Prompt Injection Attacks \| How Lakera Protects AI Systems | lakera.ai | Not available | commercial | article | 3 | 3 |
| https://www.lakera.ai/risk/indirect-prompt-injection | Indirect Prompt Injection \| How Lakera Secures Linked Content | lakera.ai | Not available | commercial | comparison | 3 | 3 |



## Response excerpts

| Prompt text | Platform | Excerpt |
| --- | --- | --- |
| Which prompt injection protection tools can a small team put in front of a customer-facing chatbot this week without a long sales process? | google-ai | Specialized Security APIs (Plug-and-Play) #### Lakera Guard * What it is: A specialized AI safety API built explicitly to detect prompt injection, jailbreaks, and data exfiltration attempts in real time. |
| Which AI security platforms are easiest to deploy as a drop-in layer without rewriting an existing LLM application? | google-ai | Portkey / Langfuse / Lakera / NeMo Guardrails (Managed configurations): * _How it works:_ Cloud-managed proxy layers where you route your outbound API calls through their secure endpoints. |
| What are the best AI security platforms for a company already standardized on a large network security vendor's ecosystem? | google-ai | AI Gateways and LLM Firewalls (e.g., Bifrost, Lakera, Prompt Security): * _What they do:_ These platforms act as high-performance proxy layers or edge agents specifically tuned to intercept prompt injections, data exfiltration, toxic ou... |



## Competitor excerpts

| Platform | Competitor name | Excerpt |
| --- | --- | --- |
| google-ai | HiddenLayer | HiddenLayer (Model Scanning): One of the leading enterprise solutions for ML security. |
| chatgpt-search | HiddenLayer | ## Platforms worth evaluating \| Platform \| Type \| Main security capabilities \| \| --- \| --- \| --- \| \| HiddenLayer Model Scanner \| Commercial \| Malware, backdoors, vulnerabilities, model integrity, and model lineage. |
| perplexity | Guardrails AI | The strongest matches are Guardrails AI and NVIDIA NeMo Guardrails. Both let engineers define custom checks and policies, but “production-ready” needs qualification: the open-source frameworks provide deployable components; production reliability... |
| google-ai | Noma Security | Noma Security (MCP Security & Agent Runtime) * What it does: Provides end-to-end security for agent ecosystems, specifically focusing on discovering approved and "Shadow MCP" servers, evaluating supply chain risks (like unpinned pac... |



## Trend

Visibility delta: -2.666666666666668
Avg position delta: -0.08257713248638865
Citation count delta: 9