What are Policies?

A policy is a user defined set of guidelines that your LLM application must adhere to. Policies are designed so that users can discover attacks that violate security properties of their application that are bespoke to their organisation.

Policies can affect your test results in one of two ways:

  • Additive to flag results that violate your organisation’s policy.
  • Filter your results, to remove flags from results that do not concern your organisation.

User Defined Observations