Security & Privacy

How do we defend against prompt injection?

Layered defenses. (1) Separate untrusted content channels from instructions — never mix user input with system prompt in one blob. (2) Validate tool outputs against strict schemas before feeding back to the model. (3) Use a classifier guardrail on both inputs and outputs. (4) Allowlist tools per context; the tool set an agent can call should be the minimum needed. (5) Require human confirmation for irreversible actions.

More on Security & Privacy

Browse the full FAQ for 164 answers, or start a free GenAI maturity assessment to see where your organisation stands.