mlsanityData to 14 Oct 2026

Lightweight Safety Guardrails Using Fine-tuned BERT Embeddings

arXiv 2411.14398 ↗First posted 21 Nov 2024cs.CLcited by 8

On the map: LLM safety and security → Safety alignment, refusal and guardrails

Abstract (arXiv)

With the recent proliferation of large language models (LLMs), enterprises have been able to rapidly develop proof-of-concepts and prototypes. As a result, there is a growing need to implement robust guardrails that monitor, quantize and control an LLM's behavior, ensuring that the use is reliable, safe, accurate and also aligned with the users' expectations. Previous approaches for filtering out inappropriate user prompts or system outputs, such as LlamaGuard and OpenAI's MOD API, have achieved significant success by fine-tuning existing LLMs. However, using fine-tuned LLMs as guardrails introduces increased latency and higher maintenance costs, which may not be practical or scalable for cost-efficient deployments. We take a different approach, focusing on fine-tuning a lightweight architecture: Sentence-BERT. This method reduces the model size from LlamaGuard's 7 billion parameters to approximately 67 million, while maintaining comparable performance on the AEGIS safety benchmark.

Key facts. Cited by 8 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 7 of its 12 references that are in the map. First posted on arXiv 21 Nov 2024.

Builds on

7 of 12 references.

Closest ancestors · 1

Same direction, newest first

  1. 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs26 Jun

Other references · 6

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
  2. 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,170
  3. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
  4. 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 365
  5. 2022A New Generation of Perspective API: Efficient Multilingual Character-level Transformerscited by 185
  6. 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 136

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 4; 2026: 4.

8 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026Reflex-Guard: A Low-Latency Guardrail for LLM Prompt Safety Using Dense Semantic Embeddings
  2. 2024Building Guardrails for Large Language Models
  3. 2026TWGuard: A Case Study of LLM Safety Guardrails for Localized Linguistic Contexts
  4. 2025Guard Vector: Beyond English LLM Guardrails with Task-Vector Composition and Streaming-Aware Prefix SFT
  5. 2025Protect: Towards Robust Guardrailing Stack for Trustworthy Enterprise LLM Systems
  6. 2025MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safety
  7. 2025SafeRoute: Adaptive Model Selection for Efficient and Accurate Safety Guardrails in Large Language Models
  8. 2025X-Guard: Multilingual Guard Agent for Content Moderation