AI safety middleware
for .NET.
Screens inputs for prompt injection, PII, toxicity, and 19 harm categories before they reach your LLM. Runs in process, so your inputs never leave your infrastructure for scanning. One NuGet install, four lines of code.
Six scanners.
One middleware call.
Built for .NET teams shipping LLM features to production. Everything runs in your process, on your hardware, under your logging.
Prompt injection & jailbreaks
Instruction overrides, role hijacking, delimiter injection, social engineering. An ML classifier catches novel attack phrasings that pattern lists miss.
Multilingual PII
Emails, phones, SSNs, Luhn validated cards, person names, addresses, passports, tax IDs, in 50+ languages. Redact PII in place or block it outright.
Toxicity & semantic harm
Multilingual toxicity detection plus 19 harm categories: hate, violence, self harm, user distress, exploitation. Classified in the source language, no translation hop.
Evasion resistant
Normalization defeats leetspeak, zero-width characters, homoglyphs, Base64, and markdown tricks before the models ever see the input.
No scanner egress
Models run in process. Your inputs never leave your infrastructure for scanning. One fewer cloud hop, one fewer processor in your privacy review. Works fully offline for local LLM and air gapped deployments.
ASP.NET Core native
Drop in middleware: AddInvarixGuard, UseInvarixGuard, done. Or call the scanning engine standalone from any .NET 8+ app.
using Invarix.Guard.Extensions;
var builder = WebApplication.CreateBuilder(args);
builder.Services.AddInvarixGuard(options => options
.BlockInjection()
.BlockPII()
.BlockToxicContent());
var app = builder.Build();
app.UseInvarixGuard(); // ← adds the safety middleware to the pipeline
app.MapPost("/chat", (ChatRequest r) => Results.Ok(new { reply = "safe" });
app.Run();Buy once,
run it forever.
Self serve for product teams, custom for everyone else.
Community
Free for evaluation, internal tools, and commercial products. The main restriction: you can't offer it to third parties as a hosted or managed service (Elastic License 2.0).
- Prompt injection and jailbreak detection, heuristics plus ML
- PII detection and redaction across 50+ languages
- Multilingual toxicity classification
- 19 semantic harm categories, plus custom categories you define
- ASP.NET Core middleware or standalone scanning engine
Professional
Lifetime licenseFor product teams shipping AI features to production. All future updates included, every environment, no support tier.
- Custom blocklist scanner with rules your ops team edits in JSON
- Two paths per rule: exact keywords plus semantic embeddings
- Hot reload: change rules without redeploying
- Per rule actions: block, warn, or log
- Lifetime license, every environment, all future updates included
Custom Solution
For teams with regulated, multi environment, or air gapped deployments that need something the standard tiers don't cover.
- Direct technical scoping with the founder
- Custom contractual terms
- Air gapped or sovereign cloud deployment guidance
- Bespoke harm categories developed with your team