> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getbifrost.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Security & guardrails

> Bifrost Edge routes AI traffic from every app through your guardrails, so PII redaction, secrets detection, content safety, and policy enforcement apply everywhere - out of the box, with the profiles you already configured.

Because Bifrost Edge routes AI traffic through your Bifrost, every [guardrail](/enterprise/guardrails) you have configured applies automatically to the AI people use on their machines. There is nothing extra to set up on the endpoint: the same rules and profiles that protect your gateway traffic now protect prompts and responses from desktop apps, browser AI, and coding agents. Configure once, and it works across every supported app.

```mermaid theme={null}
flowchart LR
    A[AI app on a machine] --> B[Bifrost Edge]
    B --> C[Bifrost guardrails<br/>PII, secrets, content safety, policy]
    C -- allowed --> D[Model provider]
    C -- blocked or redacted --> A
```

## Guardrails that apply out of the box

Your existing guardrail profiles cover Edge traffic with no additional configuration. Set them up once in [Guardrails](/enterprise/guardrails) and they take effect across the fleet.

<CardGroup cols={2}>
  <Card title="Secrets Detection" icon="key" href="/enterprise/guardrails/secrets-detection">
    Built-in Gitleaks-backed detection for leaked API keys, tokens, private keys, and credentials.
  </Card>

  <Card title="Custom Regex" icon="code" href="/enterprise/guardrails/custom-regex">
    In-process regex guardrails, including the built-in PII Detection template.
  </Card>

  <Card title="AWS Bedrock Guardrails" icon="aws" href="/integrations/guardrails/aws-bedrock">
    Enterprise content filtering, PII detection, and prompt attack prevention.
  </Card>

  <Card title="Azure Content Safety" icon="microsoft" href="/integrations/guardrails/azure-content-safety">
    Multi-modal content moderation with severity-based filtering.
  </Card>

  <Card title="Google Model Armor" icon="https://mintcdn.com/bifrost/wFrDZv1Otf3EDPGR/media/google-model-armor-card.svg?fit=max&auto=format&n=wFrDZv1Otf3EDPGR&q=85&s=d0cbdb138748c8cad7326a221bbe3a6e" href="/integrations/guardrails/google-model-armor" width="512" height="512" data-path="media/google-model-armor-card.svg">
    Policy enforcement for prompt injection, content safety, malicious URLs, and Sensitive Data Protection.
  </Card>

  <Card title="CrowdStrike AIDR" icon="https://mintcdn.com/bifrost/wFrDZv1Otf3EDPGR/media/crowdstrike-card.svg?fit=max&auto=format&n=wFrDZv1Otf3EDPGR&q=85&s=d665d7c03327b1cd2ba8f6077ba7139f" href="/integrations/guardrails/crowdstrike-aidr" width="144" height="144" data-path="media/crowdstrike-card.svg">
    Inline AI threat detection, policy enforcement, redaction, and AIDR audit visibility.
  </Card>

  <Card title="Gray Swan Cygnal" icon="https://mintcdn.com/bifrost/wFrDZv1Otf3EDPGR/media/grayswan-logo-card.svg?fit=max&auto=format&n=wFrDZv1Otf3EDPGR&q=85&s=63cfbb6c2927580526db47e504ae236a" href="/integrations/guardrails/grayswan" width="280" height="280" data-path="media/grayswan-logo-card.svg">
    AI safety monitoring with natural language rule definitions.
  </Card>

  <Card title="Patronus AI" icon="https://mintcdn.com/bifrost/wFrDZv1Otf3EDPGR/media/patronus-logo-card.svg?fit=max&auto=format&n=wFrDZv1Otf3EDPGR&q=85&s=7586aef02dae5425f189283e9dd3f8e5" href="/integrations/guardrails/patronus-ai" width="200" height="200" data-path="media/patronus-logo-card.svg">
    LLM security, hallucination detection, and safety evaluation.
  </Card>
</CardGroup>

<Note>
  Guardrails are configured in Bifrost using reusable **profiles** and **rules**. Edge does not change any of that - it simply brings more traffic under the same protection. To set up or adjust guardrails, go to [Guardrails configuration](/enterprise/guardrails).
</Note>

## The same protection across every app

Whatever AI tool someone uses, the guardrail is applied before the prompt reaches a model and before the response comes back. Here is what that looks like across a few common surfaces.

### ChatGPT web

A prompt typed into ChatGPT in the browser is routed through Edge and evaluated against your guardrails. Sensitive content such as secrets or PII is caught before it leaves the machine.

<Frame>
  <img src="https://mintcdn.com/bifrost/60LFLR_6YbjQbw-C/media/edge/edge-guardrail-chatgpt.png?fit=max&auto=format&n=60LFLR_6YbjQbw-C&q=85&s=d2f7ca5806b4d276fc5f4c51307a41e3" alt="A guardrail applied to a ChatGPT web prompt through Bifrost Edge" width="3520" height="2384" data-path="media/edge/edge-guardrail-chatgpt.png" />
</Frame>

### Claude Cowork

AI activity in CoWork is governed by the same rules and profiles, keeping protection consistent across the tools your teams use day to day.

<Frame>
  <img src="https://mintcdn.com/bifrost/60LFLR_6YbjQbw-C/media/edge/edge-guardrails-cowork.png?fit=max&auto=format&n=60LFLR_6YbjQbw-C&q=85&s=86c1069c221010b89cd8e311d510be94" alt="A guardrail applied to AI activity in CoWork through Bifrost Edge" width="2956" height="2114" data-path="media/edge/edge-guardrails-cowork.png" />
</Frame>

***

## Next steps

* Configure or review your rules in [Guardrails](/enterprise/guardrails).
* Control which apps and tools are allowed in [Govern AI apps](/edge/app-governance) and [Govern MCP servers](/edge/mcp-governance).
* Roll Edge out to your fleet in [Deploy with MDM](/edge/deployment-mdm).
