Security proxy for Gemini API traffic

Stop PII, prompt injection, and runaway spend before they reach the model.

Drop LLMFirewall between your app and Gemini. It regex-scans every outbound prompt for SSNs, card numbers, emails, and injection phrases, blocks what it finds, and re-checks the model's own reply in case it repeats something it shouldn't. A per-IP and daily budget cap stops runaway cost cold. Try it below — no signup required.

Try the live demo ↓
Live demo — real Gemini calls, really blocked

Send a prompt through the firewall

This hits the same /api/firewall endpoint a production integration would use. Clean prompts get a real Gemini response; anything flagged never leaves this server.

How it works

Every request, checked twice

01

Pre-check the prompt

Regex detection for SSN-like patterns, card numbers (Luhn-validated), emails, phone numbers, and known injection phrases. A match blocks the request — Gemini is never called.

02

Call Gemini

Clean prompts go through to gemini-3.1-flash-lite. A per-IP hourly cap and a global daily cap sit in front of every call, so one bad actor can't blow the whole budget.

03

Post-check the reply

The model's own response is scanned with the same PII detectors before it's returned — catching the case where Gemini repeats something sensitive back.

Live activity — shared demo queue, anonymized

What the firewall has caught recently

The last 20 checks from the past 24 hours across every visitor to this page — finding type and time only, never the prompt itself.

TimeResultFinding types

No activity yet — be the first, try the demo above.

Early access

Want this in front of your own Gemini traffic?

This build protects Gemini only and doesn't issue API keys yet — leave your email and we'll reach out when self-serve access opens.