Skip to main content

Signature-based AI application firewall — protects LLM apps against prompt injection, jailbreaks, and data leakage

Project description

InferenceWall

Signature-based AI application firewall.

InferenceWall protects LLM-powered applications against prompt injection, jailbreaks, content safety violations, and data leakage using a curated catalog of detection signatures with anomaly scoring.

Features

  • 70 detection signatures across 5 categories (injection, content safety, data leakage, system prompt, agentic)
  • Rust-powered heuristic engine — <0.3ms p99 for pattern matching
  • ML engines — ONNX classifier (DeBERTa/DistilBERT) + FAISS semantic similarity
  • Anomaly scoring — multiple weak signals combine into strong signals (like OWASP CRS)
  • Policy profiles — operators configure detection without code
  • Three deployment modes: SDK, API server, reverse proxy
  • API key authentication with scan/admin role separation

Installation

From PyPI (coming soon)

# Lite profile — heuristic engine only, zero ML deps
pip install inferwall

# Standard profile — adds ONNX classifier + FAISS semantic engine
pip install inferwall[standard]

# Full profile — adds LLM-judge for borderline cases
pip install inferwall[full]

From GitHub (now)

# Install from source (requires Rust toolchain)
pip install git+https://github.com/inferwall/inferwall.git

# Or clone and install
git clone https://github.com/inferwall/inferwall.git
cd inferwall
pip install -e ".[dev]"

Pre-built wheels

Download pre-built wheels from GitHub Releases or from CI artifacts:

# Download the wheel for your platform, then:
pip install inferwall_core-*.whl inferwall-*.whl

Quick Start

import inferwall

# Scan user input
result = inferwall.scan_input("user prompt here")
print(result.decision)  # "allow", "flag", or "block"
print(result.score)     # anomaly score
print(result.matches)   # matched signatures

API Server

inferwall serve

# Scan via HTTP
curl -X POST http://localhost:8000/v1/scan/input \
  -H "Content-Type: application/json" \
  -d '{"text": "What is the weather today?"}'

ML Models (Standard/Full profiles)

# Download models for the Standard profile (~730MB)
inferwall models download --profile standard

# Check what's downloaded
inferwall models status

CLI

# Test a single input
inferwall test --input "Ignore all previous instructions"

# Generate API keys
inferwall admin setup

Deployment Profiles

Profile Engines Latency Install
Lite Heuristic (Rust) <0.3ms p99 pip install inferwall
Standard + Classifier + Semantic <80ms p99 pip install inferwall[standard]
Full + LLM-Judge <2s p99 pip install inferwall[full]

Documentation

License

  • Engine code (Rust, Python, CLI, API): Apache-2.0
  • Community signatures (catalog/): CC BY-SA 4.0 — modifications must be shared back

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

inferwall-0.1.4-py3-none-any.whl (80.0 kB view details)

Uploaded Python 3

File details

Details for the file inferwall-0.1.4-py3-none-any.whl.

File metadata

  • Download URL: inferwall-0.1.4-py3-none-any.whl
  • Upload date:
  • Size: 80.0 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for inferwall-0.1.4-py3-none-any.whl
Algorithm Hash digest
SHA256 6ea2289c1423b6b0856cd3369f80c8b555ef176b5335575596bc381487c075cc
MD5 2ea1d91490f004d04478a904babfb589
BLAKE2b-256 974922c8770492b04c5ad514c795be8749b933073f9f565960adcfad50ec0e24

See more details on using hashes here.

Provenance

The following attestation bundles were made for inferwall-0.1.4-py3-none-any.whl:

Publisher: release.yml on inferwall/inferwall

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page