[{"data":1,"prerenderedAt":548},["ShallowReactive",2],{"blog-tag-de-llm-security":3},[4,80,151,208,280,363,414,510],{"slug":5,"published":6,"minutes":7,"category":8,"tags":9,"tagPages":15,"keywords":18,"about":31,"sources":39,"cover":70,"og":71,"expertise":72,"locales":73,"lang":75,"title":77,"description":78,"coverAlt":79},"llm-output-guardrails-moderation","2026-10-17",13,"security",[10,11,12,13,14],"LLM security","Guardrails","Content moderation","OWASP","Output validation",[16,17],"llm-security","guardrails",[19,20,21,22,23,24,25,26,27,28,29,30],"llm output-guardrails","unsichere llm-ausgabe verarbeitung","owasp llm05 ausgabe-prüfung","openai moderation api nutzen","omni-moderation-latest modell","llama guard 4 test","nemo guardrails streaming ausgabe","markdown-bild exfiltration","llm-ausgabe html bereinigen","groundedness-prüfung","llm content moderation produktion","output rails nemo",[32,34,37],{"name":12,"url":33},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FContent_moderation",{"name":35,"url":36},"Cross-site scripting","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FCross-site_scripting",{"name":13,"url":38},"https:\u002F\u002Fowasp.org\u002F",[40,43,46,49,52,55,58,61,64,67],{"title":41,"url":42},"OWASP GenAI Security Project: LLM05:2025 Improper Output Handling","https:\u002F\u002Fgenai.owasp.org\u002Fllmrisk\u002Fllm052025-improper-output-handling\u002F",{"title":44,"url":45},"OpenAI API Docs: Moderation","https:\u002F\u002Fplatform.openai.com\u002Fdocs\u002Fguides\u002Fmoderation",{"title":47,"url":48},"Meta: Llama Guard 4 model card and prompt formats","https:\u002F\u002Fwww.llama.com\u002Fdocs\u002Fmodel-cards-and-prompt-formats\u002Fllama-guard-4\u002F",{"title":50,"url":51},"NVIDIA NeMo Guardrails: Output rail streaming configuration","https:\u002F\u002Fdocs.nvidia.com\u002Fnemo\u002Fguardrails\u002Fconfigure-guardrails\u002Fyaml-schema\u002Fstreaming\u002Foutput-rail-streaming.md",{"title":53,"url":54},"Microsoft Learn: Prompt Shields in Azure AI Content Safety","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fai-services\u002Fcontent-safety\u002Fconcepts\u002Fjailbreak-detection",{"title":56,"url":57},"Microsoft Learn: Groundedness detection in Azure AI Content Safety","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fai-services\u002Fcontent-safety\u002Fconcepts\u002Fgroundedness",{"title":59,"url":60},"Microsoft Learn: Protected material detection in Azure AI Content Safety","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fai-services\u002Fcontent-safety\u002Fconcepts\u002Fprotected-material",{"title":62,"url":63},"Guardrails AI documentation","https:\u002F\u002Fwww.guardrailsai.com\u002Fdocs",{"title":65,"url":66},"Vue.js docs: Security best practices","https:\u002F\u002Fvuejs.org\u002Fguide\u002Fbest-practices\u002Fsecurity.html",{"title":68,"url":69},"Simon Willison: Remote prompt injection in GitLab Duo leads to source code theft","https:\u002F\u002Fsimonwillison.net\u002F2025\u002FMay\u002F23\u002Fremote-prompt-injection-in-gitlab-duo\u002F","\u002Fimages\u002Fblog\u002Fllm-output-guardrails-moderation\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fllm-output-guardrails-moderation\u002Fog.jpg","ai-engineer",[74,75,76],"en","de","hu","Output-Guardrails für LLMs: Moderation, sicheres Rendern und Validierung, bevor etwas passiert","Output-Guardrails für LLMs: sicheres Markdown-Rendering, Schema-Prüfung vor Aktionen, Moderations-Klassifikatoren, Streaming und Groundedness.","Output-Guardrails: Wasser aus dem Hahn läuft durch einen Filter in ein sauberes Glas, oben bleiben Kiesel hängen.",{"slug":81,"published":6,"minutes":82,"category":8,"tags":83,"tagPages":87,"keywords":88,"about":100,"sources":108,"cover":145,"og":146,"expertise":72,"locales":147,"lang":75,"title":148,"description":149,"coverAlt":150},"ai-red-teaming-checklist-llm-apps",12,[84,10,13,85,86],"AI red teaming","promptfoo","Penetration testing",[16],[89,90,91,92,93,94,95,96,97,98,99],"ki red teaming checkliste","llm red teaming anleitung","red teaming llm-anwendungen","owasp genai red teaming leitfaden","promptfoo red team","garak llm scanner","pyrit red teaming","llm penetrationstest","owasp top 10 llm 2025 testen","jailbreak tests llm-app","red team rag-chatbot",[101,104,107],{"name":102,"url":103},"Red team","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FRed_team",{"name":105,"url":106},"Prompt injection","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FPrompt_injection",{"name":13,"url":38},[109,112,115,118,121,124,127,130,133,136,139,142],{"title":110,"url":111},"OWASP GenAI Security Project: GenAI Red Teaming Guide (January 2025)","https:\u002F\u002Fgenai.owasp.org\u002Fresource\u002Fgenai-red-teaming-guide\u002F",{"title":113,"url":114},"OWASP GenAI Security Project: Top 10 for LLM Applications 2025","https:\u002F\u002Fgenai.owasp.org\u002Fllm-top-10\u002F",{"title":116,"url":117},"Bullwinkel et al. (Microsoft): Lessons From Red Teaming 100 Generative AI Products (2025)","https:\u002F\u002Farxiv.org\u002Fabs\u002F2501.07238",{"title":119,"url":120},"NIST AI 600-1: Generative Artificial Intelligence Profile (July 2024)","https:\u002F\u002Fnvlpubs.nist.gov\u002Fnistpubs\u002Fai\u002FNIST.AI.600-1.pdf",{"title":122,"url":123},"Promptfoo Docs: Red team quickstart","https:\u002F\u002Fwww.promptfoo.dev\u002Fdocs\u002Fred-team\u002Fquickstart\u002F",{"title":125,"url":126},"Promptfoo Docs: Red team configuration","https:\u002F\u002Fwww.promptfoo.dev\u002Fdocs\u002Fred-team\u002Fconfiguration\u002F",{"title":128,"url":129},"Promptfoo Docs: Red team plugins","https:\u002F\u002Fwww.promptfoo.dev\u002Fdocs\u002Fred-team\u002Fplugins\u002F",{"title":131,"url":132},"Promptfoo Docs: Red team strategies","https:\u002F\u002Fwww.promptfoo.dev\u002Fdocs\u002Fred-team\u002Fstrategies\u002F",{"title":134,"url":135},"NVIDIA garak: LLM vulnerability scanner (GitHub)","https:\u002F\u002Fgithub.com\u002FNVIDIA\u002Fgarak",{"title":137,"url":138},"Microsoft PyRIT documentation","https:\u002F\u002Fmicrosoft.github.io\u002FPyRIT\u002F",{"title":140,"url":141},"EU AI Act, Article 55: Obligations for providers of GPAI models with systemic risk","https:\u002F\u002Fartificialintelligenceact.eu\u002Farticle\u002F55\u002F",{"title":143,"url":144},"OWASP GenAI LLM Top 10 2026: final entries (GitHub)","https:\u002F\u002Fgithub.com\u002FGenAI-Security-Project\u002FGenAI-LLM-Top10\u002Ftree\u002Fmain\u002F2026\u002Ffinal","\u002Fimages\u002Fblog\u002Fai-red-teaming-checklist-llm-apps\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fai-red-teaming-checklist-llm-apps\u002Fog.jpg",[74,75,76],"AI-Red-Teaming-Checkliste für LLM-Apps: was man angreifen sollte, bevor es Nutzer tun","Red-Teaming-Checkliste für LLM-Apps, bevor es Nutzer tun: Scope, OWASP-2025-Testfälle, promptfoo, garak, PyRIT, menschliche Tester und Regressionstests.","AI-Red-Teaming-Checkliste: Eine Person mit Helm und Checkliste steht vor einem Burgtor, daneben ein Rammbock.",{"slug":152,"published":153,"minutes":154,"category":155,"tags":156,"tagPages":161,"keywords":162,"about":174,"sources":183,"cover":202,"og":203,"expertise":72,"locales":204,"lang":75,"title":205,"description":206,"coverAlt":207},"text-to-sql-llm-guardrails","2026-10-16",8,"rag",[157,10,158,159,160],"Text-to-SQL","PostgreSQL","Agents","Analytics",[16],[163,164,165,166,167,168,169,170,171,172,173],"text-to-sql mit llms","text-to-sql leitplanken","llm sql-agent sicherheit","natürliche sprache zu sql produktion","read-only datenbankrolle llm","bird benchmark","spider 2.0 benchmark ergebnisse","sqlglot sql validieren","row-level-security llm","mit der datenbank chatten ki","text-to-sql llm",[175,178,181],{"name":176,"url":177},"SQL","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FSQL",{"name":179,"url":180},"Natural language interface to databases","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FNatural-language_user_interface",{"name":158,"url":182},"https:\u002F\u002Fwww.postgresql.org\u002F",[184,187,190,193,196,199],{"title":185,"url":186},"BIRD-bench: leaderboard and dataset description","https:\u002F\u002Fbird-bench.github.io\u002F",{"title":188,"url":189},"Lei et al.: Spider 2.0: Evaluating Language Models on Real-World Enterprise Text-to-SQL Workflows (2024)","https:\u002F\u002Farxiv.org\u002Fabs\u002F2411.07763",{"title":191,"url":192},"PostgreSQL 18 Documentation: Row Security Policies","https:\u002F\u002Fwww.postgresql.org\u002Fdocs\u002Fcurrent\u002Fddl-rowsecurity.html",{"title":194,"url":195},"PostgreSQL 18 Documentation: Client Connection Defaults (read-only and timeouts)","https:\u002F\u002Fwww.postgresql.org\u002Fdocs\u002Fcurrent\u002Fruntime-config-client.html",{"title":197,"url":198},"SQLGlot: SQL parser, transpiler and optimizer (GitHub)","https:\u002F\u002Fgithub.com\u002Ftobymao\u002Fsqlglot",{"title":200,"url":201},"OWASP Gen AI Security Project: LLM06:2025 Excessive Agency","https:\u002F\u002Fgenai.owasp.org\u002Fllmrisk\u002Fllm062025-excessive-agency\u002F","\u002Fimages\u002Fblog\u002Ftext-to-sql-llm-guardrails\u002Fcover.webp","\u002Fimages\u002Fblog\u002Ftext-to-sql-llm-guardrails\u002Fog.jpg",[74,75,76],"Text-to-SQL mit LLMs: Schema-Kontext, Read-only-Rollen und Validierung, die hält","Wie genau Text-to-SQL wirklich ist, wie das Modell Schema-Kontext bekommt und welche Datenbank- und Code-Leitplanken generiertes SQL sicher machen.","Text-to-SQL: Eine Sprechblase gelangt durch ein vergittertes Fenster in einen Datenbankzylinder, an der Tür ein Schloss.",{"slug":209,"published":153,"minutes":210,"category":211,"tags":212,"tagPages":216,"keywords":218,"about":231,"sources":239,"cover":273,"og":274,"expertise":275,"locales":276,"lang":75,"title":277,"description":278,"coverAlt":279},"llm-endpoint-abuse-denial-of-wallet",14,"web",[213,10,214,13,215],"Nuxt","Rate limiting","Cost control",[217,16],"nuxt",[219,220,221,222,223,224,225,226,227,228,229,230],"denial of wallet ki-endpunkte","owasp llm10 unbegrenzter verbrauch","rate-limiting ki-api nuxt","nuxt sicherheit rate limiter","openai api-key im frontend schützen","llm-token-budget pro nutzer","llm-kosten begrenzen pro nutzer","nitro api rate-limiting","cloudflare turnstile nuxt einbinden","anthropic ausgabenlimit","openai hartes ausgabenlimit","llm-prompt-größenlimit",[232,234,237],{"name":214,"url":233},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FRate_limiting",{"name":235,"url":236},"Denial-of-service attack","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FDenial-of-service_attack",{"name":213,"url":238},"https:\u002F\u002Fnuxt.com\u002F",[240,243,246,249,252,255,258,261,264,267,270],{"title":241,"url":242},"OWASP GenAI Security Project: LLM10:2025 Unbounded Consumption","https:\u002F\u002Fgenai.owasp.org\u002Fllmrisk\u002Fllm102025-unbounded-consumption\u002F",{"title":244,"url":245},"Nuxt Security: Rate Limiter middleware","https:\u002F\u002Fnuxt-security.vercel.app\u002Fmiddleware\u002Frate-limiter",{"title":247,"url":248},"Nuxt Security: Request Size Limiter middleware","https:\u002F\u002Fnuxt-security.vercel.app\u002Fmiddleware\u002Frequest-size-limiter",{"title":250,"url":251},"nuxt-auth-utils: README (GitHub)","https:\u002F\u002Fgithub.com\u002Fatinux\u002Fnuxt-auth-utils",{"title":253,"url":254},"h3: request utilities (getRequestIP, readValidatedBody)","https:\u002F\u002Fh3.dev\u002Futils\u002Frequest",{"title":256,"url":257},"Upstash: Ratelimiting algorithms","https:\u002F\u002Fupstash.com\u002Fdocs\u002Fredis\u002Fsdks\u002Fratelimit-ts\u002Falgorithms",{"title":259,"url":260},"Cloudflare Turnstile: Validate the token","https:\u002F\u002Fdevelopers.cloudflare.com\u002Fturnstile\u002Fget-started\u002Fserver-side-validation\u002F",{"title":262,"url":263},"Claude Platform Docs: Rate limits and spend limits","https:\u002F\u002Fplatform.claude.com\u002Fdocs\u002Fen\u002Fapi\u002Frate-limits",{"title":265,"url":266},"Claude Platform Docs: Token counting","https:\u002F\u002Fplatform.claude.com\u002Fdocs\u002Fen\u002Fbuild-with-claude\u002Ftoken-counting",{"title":268,"url":269},"OpenAI API Docs: Spend limits","https:\u002F\u002Fdevelopers.openai.com\u002Fapi\u002Fdocs\u002Fguides\u002Fspend-limits",{"title":271,"url":272},"OpenAI API Docs: Rate limits","https:\u002F\u002Fplatform.openai.com\u002Fdocs\u002Fguides\u002Frate-limits","\u002Fimages\u002Fblog\u002Fllm-endpoint-abuse-denial-of-wallet\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fllm-endpoint-abuse-denial-of-wallet\u002Fog.jpg","vue-nuxt-developer",[74,75,76],"Denial of Wallet: öffentliche LLM-Endpunkte in einer Nuxt-App absichern","Denial of Wallet auf öffentlichen LLM-Routen in Nuxt stoppen: Auth, Rate Limits, Prompt-Limits, Token-Budgets, Turnstile und Spend Limits.","Denial of Wallet: Ein Drehkreuz bremst eine Schlange kleiner Roboter vor einer offenen Geldbörse.",{"slug":281,"published":282,"minutes":82,"category":8,"tags":283,"tagPages":288,"keywords":290,"about":299,"sources":312,"cover":357,"og":358,"expertise":72,"locales":359,"lang":75,"title":360,"description":361,"coverAlt":362},"dpia-llm-feature-worked-example","2026-10-01",[284,285,10,286,287],"DPIA","GDPR","Data protection","AI Act",[289,16],"gdpr",[291,292,293,294,295,296,297,298],"dsfa für llm-features","datenschutz-folgenabschätzung ki-assistent","dsgvo artikel 35 ki","dsfa-v österreich ki","llm kundensupport dsgvo","prompt injection datenabfluss dsgvo","ki-verordnung artikel 50 chatbot","dsfa vorlage llm",[300,303,306,309],{"name":301,"url":302},"General Data Protection Regulation","https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FTXT\u002F?uri=CELEX:32016R0679",{"name":304,"url":305},"WP29 guidelines on data protection impact assessment (WP248 rev.01)","https:\u002F\u002Fec.europa.eu\u002Fnewsroom\u002Farticle29\u002Fitems\u002F611236\u002Fen",{"name":307,"url":308},"OWASP LLM01:2025 Prompt Injection","https:\u002F\u002Fgenai.owasp.org\u002Fllmrisk\u002Fllm01-prompt-injection\u002F",{"name":310,"url":311},"Regulation (EU) 2024\u002F1689 (AI Act)","https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2024\u002F1689\u002Foj",[313,315,317,320,323,326,329,332,335,338,340,343,346,349,352,354],{"title":314,"url":302},"Regulation (EU) 2016\u002F679 (GDPR), EUR-Lex",{"title":316,"url":305},"WP29 guidelines on DPIA, WP248 rev.01 (European Commission item page)",{"title":318,"url":319},"WP248 rev.01 PDF, adopted 4 April 2017 and revised 4 October 2017","https:\u002F\u002Fec.europa.eu\u002Fnewsroom\u002Fjust\u002Fdocument.cfm?doc_id=47711",{"title":321,"url":322},"EDPB Guidelines 07\u002F2020 on the concepts of controller and processor","https:\u002F\u002Fwww.edpb.europa.eu\u002Fsystem\u002Ffiles\u002F2023-10\u002Fedpb_guidelines_202007_controllerprocessor_final_en.pdf",{"title":324,"url":325},"EDPB Opinion 28\u002F2024 on AI models, adopted 17 December 2024","https:\u002F\u002Fwww.edpb.europa.eu\u002Fsystem\u002Ffiles\u002F2024-12\u002Fedpb_opinion_202428_ai-models_en.pdf",{"title":327,"url":328},"EDPB news release on Opinion 28\u002F2024","https:\u002F\u002Fwww.edpb.europa.eu\u002Fnews\u002Fedpb-opinion-on-ai-models-gdpr-principles-support-responsible-ai_en",{"title":330,"url":331},"EDPB, Report of the work undertaken by the ChatGPT Taskforce, 23 May 2024","https:\u002F\u002Fwww.edpb.europa.eu\u002Fsystem\u002Ffiles\u002F2024-05\u002Fedpb_20240523_report_chatgpt_taskforce_en.pdf",{"title":333,"url":334},"DSFA-V, BGBl. II Nr. 278\u002F2018 (RIS)","https:\u002F\u002Fwww.ris.bka.gv.at\u002Feli\u002Fbgbl\u002FII\u002F2018\u002F278",{"title":336,"url":337},"DSFA-AV, BGBl. II Nr. 108\u002F2018 (RIS)","https:\u002F\u002Fwww.ris.bka.gv.at\u002Feli\u002Fbgbl\u002FII\u002F2018\u002F108",{"title":339,"url":308},"OWASP Top 10 for LLM Applications 2025: LLM01 Prompt Injection",{"title":341,"url":342},"OWASP Top 10 for LLM Applications 2025: LLM02 Sensitive Information Disclosure","https:\u002F\u002Fgenai.owasp.org\u002Fllmrisk\u002Fllm022025-sensitive-information-disclosure\u002F",{"title":344,"url":345},"OpenAI, Data controls in the OpenAI platform","https:\u002F\u002Fdevelopers.openai.com\u002Fapi\u002Fdocs\u002Fguides\u002Fyour-data",{"title":347,"url":348},"Commission Implementing Decision (EU) 2023\u002F1795 on the EU–US Data Privacy Framework","https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Fdec_impl\u002F2023\u002F1795\u002Foj\u002Feng",{"title":350,"url":351},"CJEU, Case C-184\u002F20, OT v Vyriausioji tarnybinės etikos komisija","https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FTXT\u002F?uri=CELEX:62020CJ0184",{"title":353,"url":311},"Regulation (EU) 2024\u002F1689 (AI Act), EUR-Lex",{"title":355,"url":356},"Regulation (EU) 2026\u002F1744 (Digital Omnibus on AI), EUR-Lex","https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2026\u002F1744\u002Foj","\u002Fimages\u002Fblog\u002Fdpia-llm-feature-worked-example\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fdpia-llm-feature-worked-example\u002Fog.jpg",[74,75,76],"DSFA für einen LLM-Support-Assistenten: ein Beispiel nach Art. 35 DSGVO","DSFA nach Art. 35 DSGVO für einen KI-Assistenten, der Kundenmails mit Bestelldaten beantwortet: wann sie nötig ist und wer die Risiken trägt.","DSFA für LLM-Assistenten: Ein Formular auf einem Klemmbrett neben einem Roboter mit Sprechblase, Lupe und Stempel.",{"slug":364,"published":365,"minutes":366,"category":8,"tags":367,"tagPages":368,"keywords":369,"about":378,"sources":383,"cover":408,"og":409,"expertise":72,"locales":410,"lang":75,"title":411,"description":412,"coverAlt":413},"lakera-guard","2026-08-04",9,[105,11,10,12],[17,16],[370,371,372,373,374,375,376,377],"lakera guard","lakera guard test","prompt-injection-filter","prompt injection erkennen","llm guardrails vergleich","pint benchmark ergebnisse","check point ki-guardrails","lakera preise",[379,380],{"name":105,"url":106},{"name":381,"url":382},"Check Point","https:\u002F\u002Fwww.checkpoint.com\u002F",[384,387,390,393,396,399,402,405],{"title":385,"url":386},"Lakera documentation: Guard API","https:\u002F\u002Fdocs.lakera.ai\u002Fdocs\u002Fapi\u002Fguard",{"title":388,"url":389},"Guard API endpoint reference","https:\u002F\u002Fdocs.lakera.ai\u002Fapi-reference\u002Flakera-api\u002Fguard\u002Fscreen-content",{"title":391,"url":392},"Lakera documentation: projects","https:\u002F\u002Fdocs.lakera.ai\u002Fdocs\u002Fprojects",{"title":394,"url":395},"Lakera documentation: self-hosting","https:\u002F\u002Fdocs.lakera.ai\u002Fdocs\u002Fselfhosting",{"title":397,"url":398},"Lakera platform pricing","https:\u002F\u002Fplatform.lakera.ai\u002Fpricing",{"title":400,"url":401},"PINT benchmark on GitHub","https:\u002F\u002Fgithub.com\u002Flakeraai\u002Fpint-benchmark",{"title":403,"url":404},"Lakera homepage","https:\u002F\u002Fwww.lakera.ai\u002F",{"title":406,"url":407},"Check Point press release on the Lakera acquisition","https:\u002F\u002Fwww.checkpoint.com\u002Fpress-releases\u002Fcheck-point-acquires-lakera-to-deliver-end-to-end-ai-security-for-enterprises\u002F","\u002Fimages\u002Fblog\u002Flakera-guard\u002Fcover.webp","\u002Fimages\u002Fblog\u002Flakera-guard\u002Fog.jpg",[74,75,76],"Lakera Guard: Prompt-Injection-Filter an der Request-Grenze","Lakera Guard im Test: ein Endpunkt vor dem Modell, PINT-Benchmark-Ergebnisse und warum die Gratis-Stufe schon bei 10.000 Anfragen im Monat endet.","Lakera Guard: Ein Wächter an der Tür hält ein Sieb, das einen Umschlag mit Haken auffängt.",{"slug":415,"published":416,"updated":417,"minutes":82,"category":8,"tags":418,"tagPages":422,"keywords":423,"about":434,"sources":443,"cover":504,"og":505,"expertise":72,"locales":506,"lang":75,"title":507,"description":508,"coverAlt":509},"pii-redaction-llm-pipelines","2026-06-26","2026-09-01",[419,285,420,10,421],"PII redaction","Microsoft Presidio","Pseudonymisation",[289,16],[424,425,426,427,428,429,430,431,432,433],"pii-schwärzung llm","pii vor llm-anfrage entfernen","microsoft presidio anleitung","pii-erkennung deutsch ungarisch","pseudonymisierung vs anonymisierung dsgvo","reversible tokenisierung llm-prompts","pii in logs und traces schwärzen","llm datenmaskierung","pii-guardrail litellm einrichten","pii-erkennung recall testen",[435,438,440],{"name":436,"url":437},"Personal data","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FPersonal_data",{"name":301,"url":439},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FGeneral_Data_Protection_Regulation",{"name":441,"url":442},"Data anonymization","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FData_anonymization",[444,447,450,453,456,459,462,465,468,471,474,477,480,483,486,489,492,495,498,501],{"title":445,"url":446},"Microsoft Presidio: documentation (limitations, methods)","https:\u002F\u002Fpresidio.dataprivacystack.org\u002F",{"title":448,"url":449},"Presidio: supported entities and country-specific recognizers","https:\u002F\u002Fpresidio.dataprivacystack.org\u002Fsupported_entities\u002F",{"title":451,"url":452},"Presidio: supporting additional languages","https:\u002F\u002Fpresidio.dataprivacystack.org\u002Fanalyzer\u002Flanguages\u002F",{"title":454,"url":455},"Presidio: anonymizer operators","https:\u002F\u002Fpresidio.dataprivacystack.org\u002Fanonymizer\u002F",{"title":457,"url":458},"Google Cloud: infoTypes reference","https:\u002F\u002Fdocs.cloud.google.com\u002Fsensitive-data-protection\u002Fdocs\u002Finfotypes-reference",{"title":460,"url":461},"Google Cloud: pseudonymization in Sensitive Data Protection","https:\u002F\u002Fdocs.cloud.google.com\u002Fsensitive-data-protection\u002Fdocs\u002Fpseudonymization",{"title":463,"url":464},"Microsoft Learn: Azure Language PII detection language support","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fai-services\u002Flanguage-service\u002Fpersonally-identifiable-information\u002Flanguage-support",{"title":466,"url":467},"AWS: Detecting PII entities with Amazon Comprehend","https:\u002F\u002Fdocs.aws.amazon.com\u002Fcomprehend\u002Flatest\u002Fdg\u002Fhow-pii.html",{"title":469,"url":470},"spaCy: models and languages","https:\u002F\u002Fspacy.io\u002Fusage\u002Fmodels",{"title":472,"url":473},"Hugging Face: novakat\u002Fnerkor-hubert (Hungarian NER)","https:\u002F\u002Fhuggingface.co\u002Fnovakat\u002Fnerkor-hubert",{"title":475,"url":476},"arXiv: An Evaluation Study of Hybrid Methods for Multilingual PII Detection","https:\u002F\u002Farxiv.org\u002Fabs\u002F2510.07551",{"title":478,"url":479},"LiteLLM: Presidio PII masking guardrail","https:\u002F\u002Fdocs.litellm.ai\u002Fdocs\u002Fproxy\u002Fguardrails\u002Fpii_masking_v2",{"title":481,"url":482},"Langfuse: masking","https:\u002F\u002Flangfuse.com\u002Fdocs\u002Fobservability\u002Ffeatures\u002Fmasking",{"title":484,"url":485},"GDPR Article 4: definitions (pseudonymisation, 4(5))","https:\u002F\u002Fgdpr-info.eu\u002Fart-4-gdpr\u002F",{"title":487,"url":488},"EDPB: Guidelines 01\u002F2025 on Pseudonymisation","https:\u002F\u002Fwww.edpb.europa.eu\u002Four-work-tools\u002Fdocuments\u002Fpublic-consultations\u002F2025\u002Fguidelines-012025-pseudonymisation_en",{"title":490,"url":491},"IAPP: EDPB publishes draft guidelines on pseudonymization","https:\u002F\u002Fiapp.org\u002Fnews\u002Fa\u002F-what-s-in-a-name-edpb-publishes-draft-guidelines-on-pseudonymization",{"title":493,"url":494},"Taylor Wessing: Analysis of the CJEU judgment in C-413\u002F23 P (EDPS v SRB)","https:\u002F\u002Fwww.taylorwessing.com\u002Fen\u002Finsights-and-events\u002Finsights\u002F2025\u002F09\u002Fanalysis-of-the-cjeu-judgment",{"title":496,"url":497},"Jones Day: CJEU clarifies scope of personal data in EDPS v SRB","https:\u002F\u002Fwww.jonesday.com\u002Fen\u002Finsights\u002F2025\u002F09\u002Fcjeu-clarifies-scope-of-personal-data-in-edps-v-srb-decision",{"title":499,"url":500},"IAPP: leaked Council Digital Omnibus compromise drops the revised personal data definition","https:\u002F\u002Fiapp.org\u002Fnews\u002Fa\u002Feu-member-states-leaked-digital-omnibus-compromise-proposal-eliminates-revised-gdpr-definition-of-personal-data",{"title":502,"url":503},"Law Health Tech: Pseudonymisation under the GDPR and the Digital Omnibus (May 2026)","https:\u002F\u002Flawhealthtech.com\u002F2026\u002F05\u002F04\u002Fpseudonymisation-under-the-gdpr-where-we-are-what-may-change-under-the-digital-omnibus-and-what-regulators-think\u002F","\u002Fimages\u002Fblog\u002Fpii-redaction-llm-pipelines\u002Fcover.webp","\u002Fimages\u002Fblog\u002Fpii-redaction-llm-pipelines\u002Fog.jpg",[74,75,76],"PII-Schwärzung in LLM-Pipelines: wo, wie und was die DSGVO dazu sagt","PII in LLM-Pipelines schwärzen: Tokens oder Maskierung, Presidio, Cloud-DLP, Lücken bei Deutsch und Ungarisch und was die DSGVO dazu sagt.","PII-Schwärzung: Eine Hand schwärzt Zeilen auf einem Blatt, ein Roboter wartet darauf.",{"slug":511,"published":512,"updated":513,"minutes":366,"category":8,"tags":514,"tagPages":516,"keywords":517,"about":523,"sources":530,"cover":542,"og":543,"expertise":72,"locales":544,"lang":75,"title":545,"description":546,"coverAlt":547},"rebuff","2026-06-22","2026-07-09",[105,10,11,515],"Canary tokens",[16,17],[511,518,519,520,521,522],"prompt-injection-erkennung","rebuff python-sdk","llm-guardrail gegen prompt injection","canary token datenabfluss erkennen","rebuff alternativen",[524,527],{"name":525,"url":526},"Rebuff","https:\u002F\u002Fgithub.com\u002Fprotectai\u002Frebuff",{"name":528,"url":529},"Large language model","https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FLarge_language_model",[531,533,536,539],{"title":532,"url":526},"Rebuff repository, archived 16 May 2025",{"title":534,"url":535},"Rebuff 0.1.1 on PyPI, released 20 January 2024","https:\u002F\u002Fpypi.org\u002Fproject\u002Frebuff\u002F",{"title":537,"url":538},"LangChain: Rebuff, detecting prompt injection attacks","https:\u002F\u002Fwww.langchain.com\u002Fblog\u002Frebuff",{"title":540,"url":541},"LLM Guard repository, archived 9 July 2026","https:\u002F\u002Fgithub.com\u002Fprotectai\u002Fllm-guard","\u002Fimages\u002Fblog\u002Frebuff\u002Fcover.webp","\u002Fimages\u002Fblog\u002Frebuff\u002Fog.jpg",[74,75,76],"Rebuff: vier Schichten Prompt-Injection-Erkennung, inzwischen archiviert","Rebuff: Prompts prüfen mit Heuristiken, einem LLM, Vektorstore früherer Angriffe und Canary-Tokens. Das Repo ist seit Mai 2025 archiviert.","Rebuff: Eine geschlossene Archivkiste vor vier Verteidigungsringen: Graben, Zaun, Mauer und Tor.",1793451237700]