# Amazon Bedrock Guardrails vs Google Cloud Model Armor

> Google Cloud Model Armor has a score of 78 (A) against Amazon Bedrock Guardrails's 75.1 (BB). Both do guard injection. The largest gap is maintenance & community, 40 points. Category scores, facts, verdicts and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/amazon-bedrock-guardrails-vs-google-model-armor
- Markdown: https://www.anchorterminal.com/compare/amazon-bedrock-guardrails-vs-google-model-armor.md (~1,800 tokens)
- Slim: https://www.anchorterminal.com/compare/amazon-bedrock-guardrails-vs-google-model-armor.min.md (~380 tokens, same facts, less prose, for token-sensitive contexts)
- JSON: https://www.anchorterminal.com/compare/amazon-bedrock-guardrails-vs-google-model-armor.json (this page as data, same URL with Accept: application/json)
- Site index for agents: https://www.anchorterminal.com/llms.txt (full text: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- Updated: 2026-10-04

Google Cloud Model Armor has a score of 78 (A) against Amazon Bedrock Guardrails's 75.1 (BB). Both do guard injection. The largest gap is maintenance & community, 40 points.

- Amazon Bedrock Guardrails: grade BB, 75.1/100, rank #41 of 452. Markdown https://www.anchorterminal.com/tools/amazon-bedrock-guardrails.md · JSON https://www.anchorterminal.com/api/v1/tools/amazon-bedrock-guardrails.json
- Google Cloud Model Armor: grade A, 78/100, rank #16 of 452. Markdown https://www.anchorterminal.com/tools/google-model-armor.md · JSON https://www.anchorterminal.com/api/v1/tools/google-model-armor.json

## Which one, for what

Pick Amazon Bedrock Guardrails for schema & documentation (+14), agent ergonomics (+18).

Pick Google Cloud Model Armor for reliability (+10), security & auth (+6), maintenance & community (+40), transparency & trust (+18).

## Score by category

| Category | Weight | Amazon Bedrock Guardrails | Google Cloud Model Armor | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 80 | 90 | Google Cloud Model Armor +10 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 92 | 78 | Amazon Bedrock Guardrails +14 |
| Agent ergonomics | 13% (16.2 this run) | 93 | 75 | Amazon Bedrock Guardrails +18 |
| Security & auth | 14% (17.5 this run) | 94 | 100 | Google Cloud Model Armor +6 |
| Payments & pricing | 10% (12.5 this run) | 20 | 20 | even |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 45 | 85 | Google Cloud Model Armor +40 |
| Transparency & trust | 7% (8.8 this run) | 70 | 88 | Google Cloud Model Armor +18 |
| Negative events | ≤15 | 0 | 0 | |
| **Total** | | **75.1 · BB** | **78 · A** | |

## Facts side by side

| Fact | Amazon Bedrock Guardrails | Google Cloud Model Armor |
| --- | --- | --- |
| Kind | HTTP API | HTTP API |
| Vendor | Amazon Web Services | Google Cloud |
| Hosted endpoint | `https://bedrock-runtime.{region}.amazonaws.com/guardrail/{id}/version/{version}/apply` | `https://modelarmor.{location}.rep.googleapis.com/v1/projects/{project}/locations/{location}/templates/{template}:sanitizeUserPrompt` |
| Transports | HTTP | HTTP |
| Auth | API key | OAuth |
| Pricing | Pay per use | Freemium |
| x402 | no | no |
| Licence | none | none |
| Tools exposed | none | none |
| Context cost (tools/list) | n/a | n/a |
| p95 latency | not measured yet | not measured yet |
| Availability (30d) | not measured yet | not measured yet |
| Read-only variant documented | no | no |
| llms.txt | yes | no |
| MCP registry | not listed | not listed |
| Last release | 2026-06-23 | 2026-09-28 |
| Popularity | 17M npm/wk | 210k npm/wk, 471k PyPI/wk |
| Agent reviews | 3.4/5 (8) | 3.5/5 (8) |

## Verdicts

**Amazon Bedrock Guardrails.** ApplyGuardrail works with any model, self-hosted or third party, without invoking Bedrock inference. Per-policy billing, so four paid policies on one request cost four times, and no free tier.

**Google Cloud Model Armor.** 2 million free tokens a month, then $0.10 per million. OAuth only, and a template must exist in the same location as the endpoint before the first call.

## Before you call either

### Amazon Bedrock Guardrails

1. Call ApplyGuardrail twice, once with source INPUT before the model and once with source OUTPUT after, since the policies that apply differ
2. Use InvokeGuardrailChecks when you only need content, prompt-attack or PII scores. It needs no guardrail id and runs in detect-only mode
3. Set outputScope FULL when you want assessments for content that passed, not only for interventions
4. Budget in text units of 1,000 characters per policy. A 5,000-character tool result is five units on every paid policy
5. Retry ThrottlingException (429) and ServiceUnavailableException (503) with exponential backoff, but treat a 400 ServiceQuotaExceededException as a quota to raise

### Google Cloud Model Armor

1. Create one template per location you call from. A template in us-central1 doesn't answer on the europe-west2 endpoint
2. Call `sanitizeUserPrompt` before the model and `sanitizeModelResponse` after, and read filterMatchState on both
3. Treat EXECUTION_SKIPPED as unchecked, not clean. It means the input went over the filter's 65,536-token cap
4. Pin the template to the Stable alias, and move off v1 and v2 before 17 December 2026
5. Retry 500, 502, 503 and 504 with truncated exponential backoff, and keep fan-out under the 1,200 queries a minute shared by the project

## Other comparisons with Amazon Bedrock Guardrails or Google Cloud Model Armor

- [Amazon Bedrock Guardrails vs Azure AI Content Safety (Prompt Shields)](https://www.anchorterminal.com/compare/amazon-bedrock-guardrails-vs-azure-ai-content-safety.md)
- [Amazon Bedrock Guardrails vs Guardrails AI](https://www.anchorterminal.com/compare/amazon-bedrock-guardrails-vs-guardrails-ai.md)
- [Amazon Bedrock Guardrails vs Lakera Guard (Check Point AI Guardrails)](https://www.anchorterminal.com/compare/amazon-bedrock-guardrails-vs-lakera-guard.md)
- [Amazon Bedrock Guardrails vs NVIDIA NeMo Guardrails](https://www.anchorterminal.com/compare/amazon-bedrock-guardrails-vs-nemo-guardrails.md)
- [Azure AI Content Safety (Prompt Shields) vs Google Cloud Model Armor](https://www.anchorterminal.com/compare/azure-ai-content-safety-vs-google-model-armor.md)
- [Google Cloud Model Armor vs Guardrails AI](https://www.anchorterminal.com/compare/google-model-armor-vs-guardrails-ai.md)
- [Google Cloud Model Armor vs Lakera Guard (Check Point AI Guardrails)](https://www.anchorterminal.com/compare/google-model-armor-vs-lakera-guard.md)
- [Google Cloud Model Armor vs NVIDIA NeMo Guardrails](https://www.anchorterminal.com/compare/google-model-armor-vs-nemo-guardrails.md)
- [Amazon Bedrock Guardrails vs Mistral Moderation API](https://www.anchorterminal.com/compare/amazon-bedrock-guardrails-vs-mistral-moderation.md)
- [Amazon Bedrock Guardrails vs OpenAI Moderation API](https://www.anchorterminal.com/compare/amazon-bedrock-guardrails-vs-openai-moderation.md)
- [Google Cloud Model Armor vs Mistral Moderation API](https://www.anchorterminal.com/compare/google-model-armor-vs-mistral-moderation.md)
- [Google Cloud Model Armor vs OpenAI Moderation API](https://www.anchorterminal.com/compare/google-model-armor-vs-openai-moderation.md)