Registry › Compare › Garak vs NeMo Guardrails

Garak vs NeMo Guardrails

NeMo Guardrails leads on trust: 74.7/100 (Grade B) against 66.5/100 (Grade B), a 8.2-point gap. NeMo Guardrails leads on supply-chain integrity and transparency.

B Garak 66.5

the LLM vulnerability scanner

NVIDIA/garak · #481 overall · #7 Security & Guardrails · coverage A (4/5)

Garak doesn't lead on any scored dimension in this pair.

B NeMo Guardrails 74.7

NeMo Guardrails is an open-source toolkit for easily adding programmable guardrails to LLM-based conversational systems.

NVIDIA-NeMo/Guardrails · #282 overall · #6 Security & Guardrails · coverage A (4/5)

Choose NeMo Guardrails if supply-chain integrity and transparency matter most.

+4.4Safety / Integrity: 100% of recent commits signed, against 73%
+2.0Transparency: OSSF Scorecard 7.1 against 4.7
+0.9Maintenance: last push 1d ago, against 9d ago
+0.9Adoption: 111.5k weekly downloads against 13.2k

Where they differ

9.5

Safety / IntegrityNeMo Guardrails +4.4

13.9

12.5

TransparencyNeMo Guardrails +2.0

14.5

18.9

MaintenanceNeMo Guardrails +0.9

19.8

15.1

AdoptionNeMo Guardrails +0.9

16.0

1 dimension identical: Identity 10.8 · Full evidence table

An independent, evidence-based trust comparison of Garak and NeMo Guardrails, two Security & Guardrails projects in the HVTracker registry. Scores come from public, checkable signals — supply-chain provenance, OSSF Scorecard, maintenance, and adoption — not popularity.

Full evidence

Signal	GarakNVIDIA/garak	NeMo GuardrailsNVIDIA-NeMo/Guardrails
HVTrust score	66.5	74.7
Evidence grade	B	B
Coverage grade	A	A
Overall rank	#481	#282
Rank in Security & Guardrails	#7	#6
GitHub stars	10.0k	7.5k
Last updated	9d ago	1d ago
Build provenance	No	No
OSSF Scorecard	4.7 / 10	7.1 / 10
License	Apache-2.0	NOASSERTION
Downloads	13k/wk	112k/wk
Trust dimensions (points earned)
Safety / integrity / 25	9.5	13.9
Identity & provenance / 18	10.8	10.8
Transparency / 17	12.5	14.5
Maintenance / 20	18.9	19.8
Adoption / 20	15.1	16.0
Runtime capability surface (full matrix)
MCP server	—	—
External providers	8 — Amazon Bedrock, Anthropic, Cohere, …	1 — OpenAI
Requires API keys	Yes	No
Plugin surface	plugins	plugins
Provenance drift	Match	Unknown

Open in the live compare tool → Garak profile NeMo Guardrails profile More Security & Guardrails →

How to read this: HVTrust (0–100) weighs supply-chain signals (provenance, OSSF Scorecard, signed commits, open license) alongside real-world adoption, scaled by an evidence-confidence factor. Grade bands: A ≥ 80, B ≥ 65, C ≥ 50, D < 50. Signals refresh daily. Full methodology v4.4 →