OpenAI Privacy Filter vs qsag-core

OpenAI released Privacy Filter on April 22, 2026 — a 1.5B-parameter open-weight model for detecting and redacting personally identifiable information from text before it ever reaches a cloud API. The model runs fully locally, handles 128,000 tokens in a single pass, and achieves a 96% F1 score across eight PII categories: names, addresses, emails, phone numbers, URLs, dates, account numbers, and secrets. Unlike traditional regex-based PII scrubbers that choke on unstructured text and context-dependent references, Privacy Filter uses a fine-tuned language model to understand semantic context — it catches "call me at the usual number" type references that pattern matchers miss entirely. The model ships with only 50M active parameters at inference time via sparse activation, keeping latency low enough for preprocessing pipelines. Available on Hugging Face and GitHub under Apache 2.0, Privacy Filter solves a real bottleneck: enterprises and regulated industries have been unable to safely pipe sensitive documents through LLMs at scale. OpenAI explicitly warns it should be treated as a "redaction aid, not a safety guarantee," which is unusually honest for a model card — and a sensible framing for high-stakes medical or legal workflows.

qsag-core is a fresh open-source Python toolkit from Neoxyber that addresses the OWASP Top 10 for Agentic Applications 2026 — specifically the two fastest-growing attack vectors: MCP tool poisoning and prompt injection in AI agents. The library uses pattern-based detection (not ML-based, to minimize false positives) to scan 26 MCP tool poisoning patterns across 7 categories and detect 28+ prompt injection patterns across 9 threat categories. It also catches ghost agent attempts, credential harvesting, and memory poisoning in real time. The toolkit is available on PyPI, ships with cryptographic attestations, and is licensed under Apache 2.0. It was created in early April 2026, making it genuinely new-to-the-scene. The timing is significant: a recent Dark Reading poll found 48% of cybersecurity professionals now identify agentic AI as the #1 attack vector, up from a niche concern in 2025. Microsoft released a similar (but much larger-scope) Agent Governance Toolkit in early April, which validates the problem space but leaves room for nimble open-source tooling. qsag-core is early-stage — zero stars on GitHub as of today, minimal community traction, and no documented production deployments. But it addresses a problem that's going to become critical as MCP adoption accelerates. First-mover advantage in a niche that's about to explode.