AI testing & review · United Kingdom
Prompt injection protection for AI agents
Ahrefs Domain Rating set in type 3 Nov 2026, reset 2 Nov 2026.
A security platform that scans content AI agents read and returns an allow, review or block decision to protect against prompt injection attacks.
Tawa Guard is a security gateway for AI agents that detects and blocks prompt injection attacks before agents act on them. The platform scans tool output, retrieved documents, web pages and email for injected instructions, returning a decision—allow, review or block—that your code acts on. It offers detection with multi-layered analysis, policy controls through Policy Studio, investigation tools showing evidence behind each decision, and operational dashboards for security teams. Detection quality is identical across all plans; pricing differences reflect the number of protected apps, included volume, and visibility into analysis.
Pricing model: Freemium
| Metric | Value |
|---|---|
| Domain Rating | 0 no change since last check |
| Trust Flow | 0 no change since last check |
| Citation Flow | 0 no change since last check |
| Referring domains | 0 no change since last check |
| External backlinks | 0 no change since last check |
Ahrefs Domain Rating set in type 3 Nov 2026, reset 2 Nov 2026. Majestic set 2 Nov 2026, reset 2 Nov 2026. Link data typeset by Majestic. Trust Flow, Citation Flow and Topical Trust Flow are trademarks of Majestic-12 Ltd.
| Domain age | 4 months |
|---|---|
| Registered | |
| Expires | |
| Registrar | Cloudflare, Inc. |
| DNSSEC | Not signed |
Measured after Tawa Guard went live on Zivaro Launch on 2 November 2026.
Day 0 since launch. Next receipt: day 30, 2 Dec 2026. These are measurements, not proof of cause: many things move these numbers. Figures we have not measured are left out.
Prompt injection is text that tells an AI model to do something its owner never asked for. It can arrive in a user's message or in content your agent reads on its own, such as tool output, retrieved documents, web pages and email. The model cannot reliably distinguish injected instructions from genuine instructions and may follow them.
No. No detector catches everything, and the service terms state that the service is not warranted to detect every injection. Tawa Guard publishes how it measures, with the dataset, operating point and date stated on every number in the research section.
No. Every plan uses the same available engines and the same input gets the same verdict on a free workspace as on an enterprise contract. Plans differ in the number of protected apps, included volume, policy controls and how much of the analysis you can see afterwards.
Tawa Guard scans the content your agent is about to read and returns a decision, allow, review or block, with a risk score. Your code decides what to do with it. You call POST /v1/scan, or use the Python or TypeScript SDK.
The Developer plan is free: 5 million Tawa Units every month, no card, one protected app, and a hard cap so a free workspace can never run up a bill. 1 Tawa Unit = 1 character scanned on the default engine, minimum 100 per scan. For more apps and volume, contact us and we will quote a plan sized to your usage.
No review of Tawa Guard set in type yet. Set the first.
Reviews are free to set. None are paid for. Read the proofs
Readers' notes · Reprints · Share the page · Your company in print? Claim it · Report a misprint
Tawa Guard has a free listing. The owner can unlock the full profile with a paid launch for $5:
AccessiaRGAA and WCAG accessibility audit tool with automated testing and AI assistance
orbenchTest LLMs on your own tasks before you switch models
LibrettoAutomatically fix failing Playwright scripts by investigating the live page and opening a GitHub pull request with a proposed code fix
Convert, sanitize, and index documents locally before anything reaches an LLM