Rate limiting, bot detection, and attack protection that runs entirely on your infrastructure. No vendor lock-in.
Add enterprise-grade protection to any endpoint with zero configuration
import { guardrailExpress } from "@guardrail-dev/core/express" // One line = Full protection (rate limiting, bot detection, attack prevention) app.use("/api", guardrailExpress.api()) // Or use decorators for fine-grained control (NestJS) @Controller("api") class ApiController { @Post("users") @Shield() // Blocks SQL injection, XSS, command injection @Limit({ max: 100, interval: "1h" }) async createUser(@Body() data: UserDto) { return userService.create(data) } }
Everything you need with code examples
Token bucket and sliding window algorithms. Limit by IP, user, or custom identifiers. Perfect for API protection and AI quota control.
window({ interval: "10m", max: 100, }) bucket({ capacity: 5000, refillRate: 2000, interval: "1h", })
Identify and block automated traffic while allowing legitimate crawlers. Over 50 known bots detected out of the box.
bot({ allow: [ "Googlebot", "Bingbot", "Slackbot", ], })
Shield against SQL injection, XSS, command injection, and path traversal. Pattern matching with zero false positives.
// Full protection shield() // Or in dry-run mode shield({ mode: "DRY_RUN" })
Geo-location and network detection built-in. Block or allow based on country, detect VPN and proxy usage.
filter({ deny: [ 'ip.src.country ne "US"', "ip.src.vpn == true", "ip.src.hosting == true", ], })
Complete security toolkit with zero external dependencies
Token bucket and sliding window algorithms. Limit by IP, user, or custom identifiers.
Identify and block automated traffic while allowing legitimate crawlers.
Country, region, city detection with VPN and proxy identification.
Block disposable, free, and invalid email addresses automatically.
Shield against SQL injection, XSS, and command injection attacks.
Resilient storage operations with automatic failure recovery.
First-class support for popular Node.js frameworks
Add security to your application in minutes. No account required.