Rust port of the [guard-core](https://github.com/Guard-Core/guard-core) detection engine. The workspace ships two published crates:
Website · Docs · Playground · Dashboard · Discord
Guard Core is the Python engine. Framework adapters are thin wrappers that translate native request/response types into Guard Core's protocols. The telemetry agents ship security events and metrics to the monitoring backend. Parallel engine implementations exist for Go, PHP, TypeScript (on npm), and Rust (on crates.io) - all ports of the same reference semantics, conformance-tested against the shared adversarial corpus.
| Package | Role | PyPI |
|---|---|---|
| guard-core | Framework-agnostic security engine | |
| guard-agent | Telemetry agent | |
| fastapi-guard | FastAPI / Starlette adapter | |
| flaskapi-guard | Flask adapter | |
| djapi-guard | Django adapter | |
| tornadoapi-guard | Tornado adapter |
Go modules published via GitHub releases. Production-ready.
| Package | Role | Release |
|---|---|---|
| guard-core-go | Go engine | |
| nethttp-guard | net/http adapter | |
| gin-guard | Gin adapter | |
| echo-guard | Echo (v4) adapter | |
| fiber-guard | Fiber (v3) adapter | |
| guard-agent-go | Telemetry agent |
Published on Packagist under the rennf93 vendor. Production-ready.
| Package | Role | Packagist |
|---|---|---|
| guard-core-php | PHP engine | |
| laravel-guard | Laravel adapter | |
| symfony-guard | Symfony adapter | |
| psr15-guard | PSR-15 adapter | |
| slim-guard | Slim 4 adapter | |
| guard-agent-php | Telemetry agent |
Published under the @guardcore npm scope; source in the guard-core-ts monorepo. Production-ready.
| Package | Role | npm |
|---|---|---|
| @guardcore/core | Core engine | |
| @guardcore/express | Express adapter | |
| @guardcore/nestjs | NestJS adapter | |
| @guardcore/fastify | Fastify adapter | |
| @guardcore/hono | Hono (edge) adapter | |
| guardagent | Telemetry agent |
Published on crates.io. Production-ready.
| Package | Role | crates.io |
|---|---|---|
| guard-core-engine | Core engine crate | |
| guard-core-rs | Facade crate (consumer entry point) | |
| actix-guard-rs | Actix Web adapter | |
| axum-guard-rs | Axum adapter | |
| tower-guard-rs | Tower adapter | |
| rocket-guard-rs | Rocket adapter | |
| guard-agent-rs | Telemetry agent |
| Package | Role | PyPI |
|---|---|---|
| guard-core-mcp | MCP server: config validation, docs search, detection sandbox |
- The 129-field
SecurityConfigunified configuration surface with fail-closed validation - The reference decorator system: the full 25-method mixin surface as a route registry
- Per-route configuration carriers and the stage pipeline with reference events
- Redis resilience surface: retries, socket timeouts, pool ceilings, distributed locks, fail-open posture
- Composite telemetry seam: multi-sink agent fan-out, OTLP, Logfire
- Behavioral usage counters, CORS preflight, cloud provider tables, sus-pattern registry with Redis persistence
- Conformance-tested against the shared adversarial corpus in CI
📚 Documentation - full technical documentation for this package.
🛡️ Guard Core - the engine's reference documentation.
🤖 Monitoring Agent Integration - monitor your Guard instance with a monitoring agent.
🦀 Rust crates: API reference on docs.rs for the facade and docs.rs for the engine crate.
Production port of the Python engine, tracked against guard-core 4.1.x with a conformance corpus (spec 4.1.0, 193 detect cases, zero xfail). Used by the Rust adapters: tower-guard-rs, axum-guard-rs, actix-guard-rs, and rocket-guard-rs.
Docs: https://guard-core.github.io/guard-core-rs/
cargo add guard-core-engineNote on registry resolution: the 4.1.0 dists of guard-core-engine and guard-core-rs are currently yanked on crates.io, so a plain registry install resolves 4.0.4. The 4.1.0 line is restored at the synchronized 4.2.0 train; until then the adapters and CI compile the engine from the sibling checkouts via path dependencies.
- Python reference: https://github.com/Guard-Core/guard-core
- TypeScript port: https://github.com/Guard-Core/guard-core-ts
- Adapters: tower, axum, actix-web, rocket
- Telemetry: guard-agent-rs
- Cloud platform: https://app.guard-core.com
Dual-licensed under either of:
- MIT license (LICENSE-MIT or http://opensource.org/licenses/MIT)
- Apache License, Version 2.0 (LICENSE-APACHE or http://www.apache.org/licenses/LICENSE-2.0)
at your option.