Registry › Compare › Deepsec vs Guardrails AI

Deepsec vs Guardrails AI

Guardrails AI leads on trust: 76.7/100 (Grade B) against 53.7/100 (Grade C), a 23.0-point gap. Guardrails AI leads on supply-chain integrity and provenance, and rests on broader evidence.

C Deepsec 53.7

Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents

vercel-labs/deepsec · #899 overall · #15 Security & Guardrails · coverage C (2/5)

Deepsec doesn't lead on any scored dimension in this pair.

B Guardrails AI 76.7

Adding guardrails to large language models.

guardrails-ai/guardrails · #234 overall · #5 Security & Guardrails · coverage A (4/5)

Choose Guardrails AI if supply-chain integrity and provenance matter most.

+8.9Safety / Integrity: OSSF Scorecard 6.0 against 4.9
+7.2Identity / Provenance: package provenance attested, against none
+5.9Adoption
+2.1Maintenance: last push 3d ago, against 35d ago

Where they differ

11.1

Safety / IntegrityGuardrails AI +8.9

20.0

10.8

Identity / ProvenanceGuardrails AI +7.2

18.0

12.7

TransparencyGuardrails AI +0.9

13.6

9.7

MaintenanceGuardrails AI +2.1

11.8

9.4

AdoptionGuardrails AI +5.9

15.3

+0.0

Runtime calibrationDeepsec +2.0

-2.0

Full evidence table

An independent, evidence-based trust comparison of Deepsec and Guardrails AI, two Security & Guardrails projects in the HVTracker registry. Scores come from public, checkable signals — supply-chain provenance, OSSF Scorecard, maintenance, and adoption — not popularity.

Full evidence

Signal	Deepsecvercel-labs/deepsec	Guardrails AIguardrails-ai/guardrails
HVTrust score	53.7	76.7
Evidence grade	C	B
Coverage grade	C	A
Overall rank	#899	#234
Rank in Security & Guardrails	#15	#5
GitHub stars	8.3k	7.6k
Last updated	35d ago	3d ago
Build provenance	No	Yes
OSSF Scorecard	4.9 / 10	6.0 / 10
License	Apache-2.0	Apache-2.0
Downloads	—	33k/wk
Trust dimensions (points earned)
Safety / integrity / 25	11.1	20.0
Identity & provenance / 18	10.8	18.0
Transparency / 17	12.7	13.6
Maintenance / 20	9.7	11.8
Adoption / 20	9.4	15.3
Runtime capability surface (full matrix)
MCP server	—	—
External providers	—	3 — Anthropic, Multi-provider (LiteLLM), OpenAI
Requires API keys	No	Yes
Plugin surface	—	—
Provenance drift	—	Unknown

Open in the live compare tool → Deepsec profile Guardrails AI profile More Security & Guardrails →

How to read this: HVTrust (0–100) weighs supply-chain signals (provenance, OSSF Scorecard, signed commits, open license) alongside real-world adoption, scaled by an evidence-confidence factor. Grade bands: A ≥ 80, B ≥ 65, C ≥ 50, D < 50. Signals refresh daily. Full methodology v4.4 →