Lightweight Safety Guardrails Using Fine-tuned BERT Embeddings
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
With the recent proliferation of large language models (LLMs), enterprises have been able to rapidly develop proof-of-concepts and prototypes. As a result, there is a growing need to implement robust guardrails that monitor, quantize and control an LLM's behavior, ensuring that the use is reliable, safe, accurate and also aligned with the users' expectations. Previous approaches for filtering out inappropriate user prompts or system outputs, such as LlamaGuard and OpenAI's MOD API, have achieved significant success by fine-tuning existing LLMs. However, using fine-tuned LLMs as guardrails introduces increased latency and higher maintenance costs, which may not be practical or scalable for cost-efficient deployments. We take a different approach, focusing on fine-tuning a lightweight architecture: Sentence-BERT. This method reduces the model size from LlamaGuard's 7 billion parameters to approximately 67 million, while maintaining comparable performance on the AEGIS safety benchmark.
Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 7 of its 12 references that are in the map. First posted on arXiv 21 Nov 2024.
Builds on
7 of 12 references.
Closest ancestors · 1
Same direction, newest first
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs26 Jun
Other references · 6
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
- 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 365
- 2022A New Generation of Perspective API: Efficient Multilingual Character-level Transformerscited by 185
- 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 136
Built on by
Citing papers per year: 2025: 4; 2026: 4.
8 papers.
- 2025GuardReasoner: Towards Reasoning-based LLM Safeguardscited by 100
- 2025Detecting and Filtering Unsafe Training Data via Data Attribution with Denoised Representationcited by 9
- 2025Toxicity in Online Platforms and AI Systems: A Survey of Needs, Challenges, Mitigations, and Future Directionscited by 3
- 2025MoGU V2: Toward a Higher Pareto Frontier Between Model Usability and Securitycited by 1
- 2026Paved with True Intents: Intent-Aware Training Improves LLM Safety Classification Across Training Regimescited by 1
- 2026Safety Beyond the Interface: Detecting Harm via Latent States in Large Language Modelscited by 1
- 2026Do Encoders Suffice? A Systematic Comparison of Encoder and Decoder Safety Judges for LLM Adversarial Evaluationcited by 0
- 2026Overflip: Repetition-Induced Label Flips in Guardrail Modelscited by 0
- 2026Safety Beyond the Interface: Detecting Harm via Latent States in Large Language Models16 Sep 2026
- 2026Overflip: Repetition-Induced Label Flips in Guardrail Models14 Sep 2026
- 2026Paved with True Intents: Intent-Aware Training Improves LLM Safety Classification Across Training Regimes25 Jun 2026
- 2026Do Encoders Suffice? A Systematic Comparison of Encoder and Decoder Safety Judges for LLM Adversarial Evaluation24 Jun 2026
- 2025Toxicity in Online Platforms and AI Systems: A Survey of Needs, Challenges, Mitigations, and Future Directions29 Sep 2025
- 2025MoGU V2: Toward a Higher Pareto Frontier Between Model Usability and Security8 Sep 2025
- 2025Detecting and Filtering Unsafe Training Data via Data Attribution with Denoised Representation17 Feb 2025
- 2025GuardReasoner: Towards Reasoning-based LLM Safeguards30 Jan 2025
Similar, not cited
Close in wording, no citation either way
- 2026Reflex-Guard: A Low-Latency Guardrail for LLM Prompt Safety Using Dense Semantic Embeddings
- 2024Building Guardrails for Large Language Models
- 2026TWGuard: A Case Study of LLM Safety Guardrails for Localized Linguistic Contexts
- 2025Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT
- 2025Protect: Towards Robust Guardrailing Stack for Trustworthy Enterprise LLM Systems
- 2025MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safety
- 2025SafeRoute: Adaptive Model Selection for Efficient and Accurate Safety Guardrails in Large Language Models
- 2025X-Guard: Multilingual Guard Agent for Content Moderation