Guardrails

Inline detection and enforcement on an agent's prompts, tool calls, and responses: blocking unsafe actions in real time.

Learn more: AI Runtime Security

Part of the Agent Control Fabric: Highflame's identity, policy, and enforcement substrate for AI agents.

Glossary Entries

ID-JAG

Identity Assertion JWT Authorization Grant. After SSO, the identity provider evaluates policy and issues an ID-JAG, which an MCP client exchanges for a server access token: the mechanism behind Enterprise Managed Authorization.
Read →

Identity provider (IdP)

The system that issues and manages identities. Highflame extends your existing IdP to agents rather than replacing it.
Read →

Inline enforcement

Evaluating and deciding on an action before it executes, out-of-band, rather than detecting it after the fact. Fail posture (open or closed) is set per surface.
Read →

Just-in-time (JIT) access

Issuing short-lived, task-scoped credentials on demand that expire when the work is done: eliminating standing access there's nothing to leak or over-grant.
Read →

LLM firewall

A checkpoint in front of a model that inspects prompts and responses for injection, sensitive data, and unsafe content. It guards the model's edge, not the agent's actions behind it.
Read →

LLM security tools

The stack that protects LLM applications: input/output filters, firewalls and gateways, runtime enforcement, red teaming, and observability. No single tool covers all five.
Read →