Build and secure your AI applications
ML models, typed SDKs, and drop-in integrations for Claude Code, n8n, LiteLLM, and custom stacks.
Models, SDKs, and integrations
Every component of Vigil Guard's detection stack, available standalone.
VGE CC-Guard
Safe Claude Code, out of the box
Claude Code can read your .env, run shell commands, edit your repo, and pull untrusted content from the web. CC-Guard intercepts every tool call, screens outputs through Vigil Guard Enterprise (VGE) before Claude sees them, and asks you to decide when something is risky. Your team keeps the productivity of Claude Code without the silent leaks, prompt injections, or accidental writes.
- Per-tool gate: allow, ask, or block before execution
- PostTool output analysis through VGE with quarantine and HITL decisions
- Credential path deny-list (.env, ~/.ssh, AWS, GCP, kube secrets)
- URL Access Baseline blocks cloud metadata endpoints and unsafe URL shapes
- Native Claude Code permissions editor (allow, ask, deny tables)
- Local JSONL audit log, no raw blocked tool output stored
Install
$ npm install -g @vigil-guard/vge-cc-guardThen run vge-cc-guard install --apply --scope=user to wire it into Claude Code.

VGE PromptGuard v1g
The detection engine behind Vigil Guard Enterprise. 44M-parameter model with native English and Polish support, code-aware classification, and extended coverage for 5+ additional languages.

- 0.981 F1 on direct prompt injection detection
- 97.5% agentic attack detection across tool outputs, API responses, and function returns
- Sub-1% false positive rate in production workloads
- 2× overall F1 vs base model on Protect AI validation set (0.934 vs 0.452)
- Code-native: trained on source code from MLM phase, catches injections in code contexts
- ONNX-optimized for real-time CPU inference (44M parameters)
Python SDK
Official Python SDK for Vigil Guard Enterprise
LiteLLM Guardrail (official)
Vigil Guard is a built-in guardrail provider in LiteLLM Proxy. Add one block to config.yaml and protect every model behind your gateway. No separate connector to install.

- Native vigil_guard provider, shipped inside LiteLLM
- Configure in config.yaml, no extra repo or build step
- pre_call and post_call modes: scan prompts and model output
- ALLOW / SANITIZE / BLOCK based on your policy
- Inspects tool-call arguments on post-call checks
- Fail-closed by default, fail_open available per guardrail
You can't secure what you don't see.
AI is already part of your environment. Vigil Guard makes it visible, controllable and safe.
