Introducing the Generative Application Firewall (GAF)

This paper introduces the Generative Application Firewall (GAF), a new architectural layer for securing LLM applications. Existing defenses – prompt filters, guardrails, and data-masking – remain fragmented; GAF unifies them into a single enforcement point, much like a WAF coordinates defenses for web traffic, while also covering autonomous agents and their tool interactions.