AI Defense Stack

LLM firewalls & guardrails

Alice WonderSuite: AI safety suite with a runtime guardrail

Alice is an AI safety suite with a runtime guardrail from Alice. It is a commercial product offered as: API, Library. Pricing model: not published.

  • Last reviewed
Visit Alice (opens in a new tab) Documentation (opens in a new tab)
Commercial Layer 6: Runtime guardrails

Best for

Teams that want a vendor-run guardrail with custom policy detectors for customer-facing AI apps and agents, and that also want red teaming from the same vendor

Ownership

ActiveFence became Alice in 2026, according to the company's blog post of January 14, 2026. The post describes a name change, not an acquisition. Source, checked October 21, 2026: alice.io (opens in a new tab)

Consider instead if

What Alice does

Alice, the company that was ActiveFence until its 2026 rename, sells WonderSuite, an AI safety platform. WonderFence is its runtime guardrail: it sits between your AI and your users, screens every prompt and response, and gives each customer policy a dedicated detector. The product page lists prompt injection, PII masking and fraud detection as examples, with coverage of text, image, audio and video and more than 20 languages, and it logs every decision for audit. Alice also lists red teaming products, WonderBuild before launch and WonderCheck in production, which this entry does not score. The docs describe a REST API and an SDK. No pricing page is published, and the pages do not say how WonderFence is hosted.

This summary is our own wording of the sourced facts on this page.

Key facts

Each value links to the page that states it, with the date we checked it.

Vendor
Alice Source, checked October 21, 2026: alice.io (opens in a new tab)
Status
Active Source, checked October 21, 2026: alice.io (opens in a new tab)
Ownership
ActiveFence became Alice in 2026, according to the company's blog post of January 14, 2026. The post describes a name change, not an acquisition. Source, checked October 21, 2026: alice.io (opens in a new tab)
Open source
No: closed source (proprietary) Source, checked October 21, 2026: alice.io (opens in a new tab)
Latest release
Not documented in the sources we checked
Deployment
API, Library Source, checked October 21, 2026: docs.alice.io (opens in a new tab)
Pricing model
Not published in the sources we checked Source, checked October 21, 2026: alice.io (opens in a new tab)
Website
alice.io Source, checked October 21, 2026: alice.io (opens in a new tab)
Documentation
docs.alice.io Source, checked October 21, 2026: docs.alice.io (opens in a new tab)
API reference
Not documented in the sources we checked
Quickstart
Not documented in the sources we checked
Security page
Not documented in the sources we checked
Attestations or disclosure
Home page shows SOC 2, HIPAA, ISO 27001 and ISO 42001 badges (no reports or scope linked) Source, checked October 21, 2026: alice.io (opens in a new tab)

Capabilities

As documented by the vendor or project. The tag is our label from a controlled vocabulary.

Where Alice fits in our AI security layers

Our analysis

Our editorial model, not a standard. The primary layer follows the category, except for tools whose main documented job is detection and response; other layers rest on a capability the sources document. How the model works.

AI security layers that Alice covers, with the role, how each applies and what it rests on
LayerRoleHow it appliesBased on
L6 Runtime Runtime guardrails Primary Screen what goes into and comes out of a model in live traffic, and limit abuse of the model endpoint. Follows its category, LLM firewalls & guardrails
L5 Data Data protection Also covers Lists PII masking among the detectors a customer policy can use. Policy detectors include PII masking
L8 Monitoring Monitoring and response Also covers Documents logging of every guardrail decision for audit. Logs every guardrail decision for audit

OWASP LLM Top 10 mapping

Our analysis

The risk list is OWASP's (Top 10 for LLM Applications, 2025). The mapping is our analysis, and each row rests on a capability the sources document.

OWASP LLM risks mapped to Alice, with the capabilities each mapping rests on
RiskHow it appliesBased on
LLM01 Prompt Injection Prompt injection is a named example of a policy detector. Policy detectors can cover prompt injection, one of the examples the product page names
LLM02 Sensitive Information Disclosure PII masking is a named example of a policy detector. Policy detectors include PII masking
LLM05 Improper Output Handling Every response is screened and blocked before it reaches users or systems. Blocks harmful, non-compliant or off-policy responses before they reach users or systems

Not mapped in our analysis: LLM07, LLM09, LLM10. These are risks we expect tools in this category to cover; the sources we checked do not document a matching capability.

Alternatives and related tools

More in LLM firewalls & guardrails, ranked within the category by Coverage Score.

NVIDIA NeMo Guardrails

NVIDIA

Open sourceApache-2.0
  • Library
  • Self-hosted
  • API

Adds programmable input, dialog, retrieval, execution and output rails to LLM applications.

Best for: Teams that want to script rules for one LLM application in Python and run them in their own infrastructure

Coverage Score 76 out of 100
  • LLM01 Prompt Injection
  • LLM02 Sensitive Information Disclosure
  • LLM05 Improper Output Handling
  • LLM06 Excessive Agency

Reviewed

Portkey AI Gateway

Palo Alto Networks (Portkey)

Open sourceMIT Freemium Now Prisma AIRS AI Gateway
  • SaaS
  • Self-hosted
  • API

Routes LLM traffic through one gateway API and runs input and output guardrail checks on each request.

Best for: Teams that want a single gateway for several LLM providers with guardrail checks, available as open source or as a hosted service

Coverage Score 69 out of 100
  • LLM01 Prompt Injection
  • LLM02 Sensitive Information Disclosure
  • LLM05 Improper Output Handling
  • LLM09 Misinformation

Reviewed

Kong AI Gateway

Kong

Open sourceApache-2.0
  • Self-hosted
  • SaaS
  • API

Routes LLM traffic through Kong with prompt guards, PII sanitization, spend limits and observability.

Best for: Teams that already run Kong as an API gateway and want LLM routing and prompt controls on the same data plane

Coverage Score 65 out of 100
  • LLM01 Prompt Injection
  • LLM02 Sensitive Information Disclosure
  • LLM10 Unbounded Consumption

Reviewed

Alice FAQ

Is Alice the same company as ActiveFence?

Alice's blog post of January 14, 2026 says ActiveFence became Alice and presents it as a name change, not an acquisition. The old activefence.com address redirects to alice.io.

What does WonderFence screen?

Every prompt going in and every response coming out. The product page says detection covers text, image, audio and video in more than 20 languages.

Does Alice publish prices?

No. We found no pricing page or link on alice.io or docs.alice.io.

Key facts you can cite

We have no commercial relationship with Alice.

Sources & last reviewed

Last reviewed . We compile from the vendors' own public pages and repositories and we do not run the products. Source links open in a new tab. Found a mistake? Report a correction.