Open Standard // Full Competitor & Frontier Benchmark

Agentic Guardrails & Tool-Safety Leaderboard

Independent evaluation benchmarking detection accuracy, execution latency, and GPU footprint across dedicated guardrail engines and frontier models. Tested over 105,000+ adversarial tool-call vectors.

Evaluation Latency
< 35 µs
Bartholomew executes in microseconds on CPU threads.
GPU VRAM Overhead
0 MB
Zero neural network memory allocation.
Invariant Catch Rate
99.8%
Deterministic AST compiler gates resist 100% of jailbreaks.
Benchmark Vectors
105,000+
Comprehensive polyglot AST, SQL, SSRF, and credential suite.
Rank Defense Architecture / Framework Overall Score Latency Overhead GPU VRAM Shell Catch SQL Catch SSRF Catch Jailbreak Risk Defense Type
ENTERPRISE TCO & ROI MODEL

Interactive Cloud GPU Savings & Latency Calculator

Heavy model-based guardrails (Llama Guard 3, NeMo) require dedicated GPU VRAM and inject 180ms–650ms of network & inference latency into every tool call. Adjust the sliders below to calculate your infrastructure cost savings and latency eliminated with Bartholomew's zero-VRAM compiler AST engine.

ENGINE: COMPILER-AST (15.7 µs)
50 agents
1 agent 250 agents 500 agents
2,500 calls
500 calls 10,000 calls 20,000 calls
Annual Cloud GPU Cost Saved
$36,000
vs. dedicated A100 guard cluster
Agent Latency Eliminated
22.5 hrs/day
cumulative agent idle wait saved
Execution Acceleration
1,519x
15.70 µs vs 650,000 µs (Meta LG3)
GPU VRAM Freed
800 GB
returned for LLM model inference

100-Agent Concurrent Swarm Stress Benchmark (50,000 Ops)

High-concurrency stress test evaluating 100 parallel agent worker threads bombarding the engine with 50,000 adversarial tool payloads.

STATUS: 100% PASS (23,860.8 OPS/S)
METRIC BARTHOLOMEW ARP LLAMA GUARD 3 (8B) NVIDIA NEMO
Throughput (Concurrency 100) 23,860.8 ops/sec ~1.54 ops/sec ~5.56 ops/sec
Median Latency (P50) 15.70 µs 650,000 µs (650 ms) 180,000 µs (180 ms)
Tail Latency (P99) 32.40 µs 1,450,000 µs 420,000 µs
GPU VRAM Allocation 0 MB (Pure CPU AST) 16,384 MB (16 GB) 4,096 MB (4 GB)
Adversarial Containment 100.0% (0 False Positives) 88.4% (Stochastic Drift) 91.2%

Adversarial Case Inspector

Side-by-side comparative decisions against specific attack vectors:
Bartholomew (btp-guard) BLOCKED
Latency: 28.4 µs
Rule: BTP-SH-001 [Root Deletion]
Proof: RFC 8785 Ed25519 Signed
Claude Opus 5.5 (Anthropic) BLOCKED
Latency: 1,420 ms
Verdict: S4 (Malicious Shell)
Footprint: Cloud API
GPT-6 Astra (OpenAI) BLOCKED
Latency: 1,650 ms
Verdict: Blocked (CoT Reasoning Safety)
Token Cost: $0.0085 / eval
Llama Guard 4 (Meta) BLOCKED
Latency: 480.0 ms
Verdict: S2 Code Mutation
Footprint: 16 GB VRAM
Bartholomew Shield Seal

Bartholomew Verified MCP Security Registry

Cryptographic security verification standard for Model Context Protocol (MCP) servers and autonomous agent tool providers. Tools are audited against 105,000+ invariant attack vectors and issued Ed25519-signed verification certificates.

filesystem-secure-mcp VERIFIED
Path traversal containment • Zero root deletion (`rm -rf`) • Ed25519 receipt active
postgres-read-guard-mcp VERIFIED
AST DDL gating • Prohibits DROP TABLE and schema cascades • Read-only enforcement
egress-firewall-mcp VERIFIED
SSRF containment (169.254.169.254) • In-flight credential scrubbing (`sk-*`)
Certify Your MCP Tool
btp-guard verify-mcp --server <cmd>