How it works
Defenses
Attack Patterns MCP Attack Atlas What we catch Hardening manual OWASP LLM Top 10 MITRE ATLAS
Learn
Encyclopedia (new) Agent Security 101 Blog Reports CVP runs Thesis
Resources
Docs GitHub Action (live) vs Lakera vs Promptfoo Team
Theme
Compare · Architecture Fit

Sunglasses vs Lakera Guard (now Check Point AI Guardrails)

Layered security, not winner-take-all · Name per its docs · Facts checked 2026-10-29
sunglasses://compare/sunglasses-vs-lakera
The framing

This comparison is architecture fit, not winner-take-all branding. Sunglasses is a fast, local pre-ingestion filter; you can place it in front of a guardrail product in the same pipeline.

Lakera Guard

Now Check Point AI Guardrails, per its docs, which describe it as available as a SaaS cloud-hosted solution or a self-hosted product.

Where Sunglasses fits

Sunglasses is Layer 1 — local, free. It scans a typical attack string in ~3.8ms (median of our own 38-string set) and sends nothing anywhere unless you pass --report-to.

Side by side

The grey line under each Lakera Guard cell gives its own words and the page they come from, fetched 2026-10-29. Pick by where you need the scan to run and what you can send off your machine.

Sunglasses
Lakera Guard
Where it runs
100% on your machine
A SaaS cloud-hosted solution or a self-hosted product.Its docs: “AI Guardrails is available as an … Software as a Service (SaaS) cloud-hosted solution or Self-hosted product.” (docs.lakera.ai/guard.md, fetched 2026-10-29). Also listed: “Full offline deployment support for the most restrictive environments.” (docs.lakera.ai/docs/selfhosting, fetched 2026-10-29).
Data leaves your machine
No — no API key, no cloud, no telemetry; nothing is sent unless you pass --report-to.
With the SaaS deployment, input goes to the vendor’s hosted service. With the self-hosted one, its docs say the data stays in your own infrastructure.Its docs: “Self-hosting Check Point AI Guardrails allows organizations to keep all data within their own infrastructure.” (docs.lakera.ai/docs/selfhosting, fetched 2026-10-29).
Cost to start
MIT — free to use
A free account is available, per its docs.Its docs: “You can start protecting your LLM applications in minutes by signing up for a free account” (docs.lakera.ai/guard.md, fetched 2026-10-29).
Described as
Fast, known-pattern pre-ingestion filtering
Zero-day protection from a threat database, per its docs.Its docs: “so you can gain zero day protections and stay ahead of constantly arising new threats.” and “Our proprietary threat database contains tens of millions of attack data points, and is growing by roughly 100,000 entries per day” (docs.lakera.ai/guard.md, fetched 2026-10-29).

Better together

sunglasses://compare/sunglasses-vs-lakera/together
Two layers, one pipeline

Sunglasses is a fast, local pre-ingestion filter — you can place it in front of a guardrail product in the same pipeline. We do the fast, local scan first; the guardrail product does its own analysis second. Two layers, one pipeline.

The adapter system

Sunglasses ships an adapter system and integrates with LangChain, CrewAI, and MCP workflows, so it slots in front of existing security stacks rather than replacing them.

When to pick which

sunglasses://compare/sunglasses-vs-lakera/pick
Pick Sunglasses when

you need local-only, offline, zero-cost scanning — compliance, privacy, air-gapped environments, budget, or principle. One pip install takes you from nothing to defended against known attacks.

Pick a guardrail product when

you want the threat-database protection its docs describe and your policy allows the deployment you pick, SaaS or self-hosted.

Pick both when

you want defense in depth: the local filter runs first, and the guardrail product may catch things the local filter does not.

Sources and how to check

sunglasses://compare/sunglasses-vs-lakera/sources
Lakera Guard docs

docs.lakera.ai/guard.md and docs.lakera.ai/docs/selfhosting, fetched 2026-10-29. Every quoted line in the table is from one of these two pages.

Not read

Its pricing and terms pages were not read, so this page states no price and no license for Lakera Guard.

The name

Its docs call the product Check Point AI Guardrails (docs.lakera.ai/docs/selfhosting, fetched 2026-10-29). This page uses both names.

If something is out of date

Tell us at [email protected] and we will correct this page.

FAQ

Is Sunglasses a replacement for Lakera Guard (now Check Point AI Guardrails, per its docs)?+
No. Comparison here is architecture fit, not winner-take-all. Sunglasses is a fast, local, MIT-licensed pre-ingestion filter; Lakera Guard is a guardrail product that its docs describe as available as SaaS or self-hosted. You can place Sunglasses in front of it in the same pipeline — the local scan runs first, the vendor’s analysis second.
When should I use Sunglasses instead of a cloud tool?+
When you cannot send agent input to a third-party API — because of compliance, privacy, cost, air-gapped environments, or principle. Sunglasses runs entirely on your machine with no API key, no cloud, and no telemetry, unless you pass --report-to, which sends that scan's result to the URL you name, or install the optional audio extra, which downloads its Whisper model when a scan needs it and no intact copy is cached.
Can I run both together?+
Yes. Sunglasses ships an adapter system and integrates with LangChain, CrewAI, and MCP workflows, so it can sit in front of a guardrail product in the same pipeline. If that guardrail is a hosted service, every attack caught locally is one fewer call to it.