Skip to content
← Models
Open weightsGoogle/10 trustMetrics-checked

ShieldGemma

Google's open-weight safety classifier suite for filtering prompts and outputs.

Visit official page →

About

ShieldGemma is Google's family of open-weight content-safety classifiers, first released in mid-2024 on Gemma 2 bases in 2B, 9B, and 27B sizes, followed by ShieldGemma 2, a 4B multimodal guardian built on Gemma 3 that screens both text and images. The models output safe/unsafe verdicts with per-category confidence across policies like hate speech, harassment, dangerous content, and sexually explicit material.

Weights are open under the Gemma Terms of Use (commercial use allowed) and run in Transformers, Keras, JAX, and Ollama, making them a popular self-hosted alternative to closed moderation APIs. They support both input filtering (screening user prompts) and output filtering (checking generations), with tunable thresholds per deployment.

Specs

Context window

Pricing

Free quota

API access

Weights

Open weights

Released

July 1, 2024

Benchmarks

Provider-reported unless a source says otherwise. Benchmarks are marketing-adjacent by nature — treat them as directional.

Use cases

content-moderationllm-guardrailsinput-output-filtering

Trust score — 7/10

/10 trustMetrics-checked

Scored 7/10 (metrics tier, metrics-v1). Evidence: Verified via vendor site/docs/GitHub and reputable coverage, wave 109; Trending score 74/100 from researcher assessment.

More in the shieldgemma family

Sources