PII Firewall

5.8easy start · #15 of 21
in AI Guardrail Software

Runs on Linux, self-hosted.

PII Firewall is ranked #15 of 21 in AI guardrail software on The Geeks Club. It runs on Linux, Self-hosted. There is a free plan.

PII Firewall plans and pricing

Open source Free Apache 2.0 · Python package · regex-only install needs no ML dependencies pii-firewall.com · 7 Oct 2026

Enkrypt AI Guardrails 0 of 4 in the starter kit Lesson 17.2 Fiddler Guardrails 0 of 4 in the starter kit Lesson 27.1 OpenSecureAI Prompt Firewall 0 of 4 in the starter kit Lesson 37.1 PromptGuard 0 of 4 in the starter kit Lesson 47.1 Amazon Bedrock Guardrails 0 of 4 in the starter kit Lesson 57.0 Openlayer Guardrails 0 of 4 in the starter kit Lesson 67.0

Purpose: Intercepts and anonymizes PII before it reaches an LLM, then restores original values in the response.
Domain profiles: Built-in profiles include healthcare, finance, legal, generic, and custom.
Detection: Detection backends include regex, Presidio, GLiNER, Transformers, OpenAI Privacy Filter, hybrid, and custom options.
PII handling: Six disposition actions are supported: keep, pseudonymize, redact, generalize, mask, and hash.
Languages: The product says it supports 55+ languages with automatic language detection and locale-specific patterns.
Integrations: Examples cover OpenAI, Anthropic, LangChain, FastAPI, streaming transport, Ollama, LiteLLM, and arbitrary HTTP LLM endpoints.
Data controls: The maker describes tenant-scoped token mappings and a forget operation that deletes vault mappings for a thread or case.
Audit: Each call produces a trace with detected entity types, confidence scores, and applied replacements.
License: The project is open source under the Apache 2.0 license.
Install: The maker provides a Python package install; the base regex-only install has no ML dependencies.
Intended users: The maker highlights healthcare, finance, and legal use cases, including clinical NLP, fintech support automation, and legal document review.
Notable limit: The maker says the HASH action is for analytics workflows and is not used in built-in presets.
Price from: Free

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.