EVERYTHING XIAOMI
Get listed

PII Firewall

PII Firewall intercepts personally identifiable information before it reaches an LLM, then restores the original values in the response.

Place
#17 of 23
Score
5.7
PII Firewall's website

What PII Firewall is

PII Firewall intercepts personally identifiable information before it reaches an LLM, then restores the original values in the response. It is a free, open-source, self-hosted tool for Linux, with a Python package and a regex-only installation that needs no ML dependencies. Its built-in profiles cover healthcare, finance, legal, and generic use, and users can create custom profiles. Detection options include regex, Presidio, GLiNER, Transformers, OpenAI Privacy Filter, hybrid setups, and custom backends. For detected information, it supports keeping, pseudonymizing, redacting, generalizing, masking, or hashing values. The product says it supports 55+ languages with automatic language detection and locale-specific patterns. Integration examples include OpenAI, Anthropic, LangChain, FastAPI, streaming transport, Ollama, LiteLLM, and arbitrary HTTP LLM endpoints. Tenant-scoped token mappings and a forget operation can remove vault mappings for a thread or case. Each call records detected entity types, confidence scores, and applied replacements. The project uses the Apache 2.0 license.

Good

  • Free and open source under Apache 2.0
  • Regex-only install needs no ML dependencies
  • Offers profiles for healthcare, finance, and legal
  • Supports multiple ways to handle detected PII
  • Includes traces with entity types and confidence scores

Watch out

  • Requires self-hosting on Linux
  • Hashing is not used in built-in presets

Who it suits

It suits teams handling sensitive text in healthcare, finance, or legal workflows. Linux users who want to host a Python-based PII layer themselves may also find it relevant.

Verdict

PII Firewall combines configurable detection and replacement options with self-hosted deployment and traces for each call. Its Linux-only platform listing and the hashing limitation are worth considering before adoption.

Plans and prices

From PII Firewall's own pricing page, checked 7 Oct 2026.

All about pricing
PlanPriceWhat it gives you
Open sourceFreeApache 2.0 · Python package · regex-only install needs no ML dependencies

The facts

Each one read from PII Firewall's own pages, with the date it was checked.

What it does

Audit
Each call produces a trace with detected entity types, confidence scores, and applied replacements.checked 7 Oct 2026
Data controls
The maker describes tenant-scoped token mappings and a forget operation that deletes vault mappings for a thread or case.checked 7 Oct 2026
Detection
Detection backends include regex, Presidio, GLiNER, Transformers, OpenAI Privacy Filter, hybrid, and custom options.checked 7 Oct 2026
Domain profiles
Built-in profiles include healthcare, finance, legal, generic, and custom.checked 7 Oct 2026
Install
The maker provides a Python package install; the base regex-only install has no ML dependencies.checked 7 Oct 2026
Integrations
Examples cover OpenAI, Anthropic, LangChain, FastAPI, streaming transport, Ollama, LiteLLM, and arbitrary HTTP LLM endpoints.checked 7 Oct 2026
Intended users
The maker highlights healthcare, finance, and legal use cases, including clinical NLP, fintech support automation, and legal document review.checked 7 Oct 2026
Languages
The product says it supports 55+ languages with automatic language detection and locale-specific patterns.checked 7 Oct 2026
License
The project is open source under the Apache 2.0 license.checked 7 Oct 2026
Notable limit
The maker says the HASH action is for analytics workflows and is not used in built-in presets.checked 7 Oct 2026
PII handling
Six disposition actions are supported: keep, pseudonymize, redact, generalize, mask, and hash.checked 7 Oct 2026
Purpose
Intercepts and anonymizes PII before it reaches an LLM, then restores original values in the response.checked 7 Oct 2026

Alternatives to PII Firewall

All alternatives
  1. 1PromptGuard logo

    PromptGuard

    Free planWebAPIExtensionLinux
    7.9From $19 a month
    Visit
  2. 2

    CyberSecEval

    Free planOpen sourceWebAPILinuxmacOS
    7.5Free plan
    Visit
  3. 3NVIDIA NeMo Guardrails logo

    NVIDIA NeMo Guardrails

    Free planOpen sourceAPILinuxmacOSSelf-hosted
    7.4Free plan
    Visit
  4. 4

    Oracle Mobile Authenticator

    Free planAndroidiOSWindows
    6.9Free plan
    Visit
  5. 5Enkrypt AI Guardrails logo

    Enkrypt AI Guardrails

    Free planWebAPISelf-hosted
    6.8From $1,608 a year
    Visit
  6. 6

    OpenSecureAI Prompt Firewall

    Free planWebSelf-hosted
    6.7From $49 a month
    Visit