Add support for content parts and image URLs in AI Guard #10449

smola · 2026-01-27T13:43:28Z

What Does This Do

Add support for content parts in LLM messages sent with the AI Guard SDK. See docs. See also the PR for system-tests. The syntax here is a subset of OpenAI's Chat Completion API to send images (docs).
This lets customers send multi-modal prompts (text + images) to AI Guard. These images can be either HTTP URLs, or base64-encoded images in data URLs.

Motivation

Support multi-modal prompts (text + images) in AI Guard.

Additional Notes

Validated with system tests at DataDog/system-tests#6131

Contributor Checklist

Format the title according the contribution guidelines
Assign the type: and (comp: or inst:) labels in addition to any useful labels
Don't use close, fix or any linking keywords when referencing an issue.
Use solves instead, and assign the PR milestone to the issue
Update the CODEOWNERS file on source file addition, move, or deletion
Update the public documentation in case of new configuration flag or behavior

Jira ticket: APPSEC-60264

pr-commenter · 2026-01-27T14:33:31Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	smola/ai-guard-content-parts
git_commit_date	1769530654	1769537508
git_commit_sha	`78be799`	`8c3688e`
release_version	1.59.0-SNAPSHOT~78be799166	1.59.0-SNAPSHOT~8c3688ea03

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1769539503	1769539503
ci_job_id	1381047834	1381047834
ci_pipeline_id	93114634	93114634
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-0-s2di055a 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-0-s2di055a 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
module	Agent	Agent
parent	None	None

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 63 metrics, 8 unstable metrics.

Startup time reports for petclinic

gantt
    title petclinic - global startup overhead: candidate=1.59.0-SNAPSHOT~8c3688ea03, baseline=1.59.0-SNAPSHOT~78be799166

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.06 s) : 0, 1059539
Total [baseline] (10.925 s) : 0, 10925405
Agent [candidate] (1.058 s) : 0, 1057912
Total [candidate] (10.982 s) : 0, 10982033
section appsec
Agent [baseline] (1.248 s) : 0, 1247594
Total [baseline] (11.081 s) : 0, 11080957
Agent [candidate] (1.228 s) : 0, 1227856
Total [candidate] (10.975 s) : 0, 10974766
section iast
Agent [baseline] (1.225 s) : 0, 1225208
Total [baseline] (11.199 s) : 0, 11198651
Agent [candidate] (1.228 s) : 0, 1227715
Total [candidate] (11.124 s) : 0, 11124454
section profiling
Agent [baseline] (1.186 s) : 0, 1186151
Total [baseline] (10.906 s) : 0, 10905707
Agent [candidate] (1.18 s) : 0, 1179744
Total [candidate] (10.94 s) : 0, 10939633

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.06 s	-
Agent	appsec	1.248 s	188.055 ms (17.7%)
Agent	iast	1.225 s	165.669 ms (15.6%)
Agent	profiling	1.186 s	126.612 ms (11.9%)
Total	tracing	10.925 s	-
Total	appsec	11.081 s	155.552 ms (1.4%)
Total	iast	11.199 s	273.246 ms (2.5%)
Total	profiling	10.906 s	-19.698 ms (-0.2%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.058 s	-
Agent	appsec	1.228 s	169.944 ms (16.1%)
Agent	iast	1.228 s	169.803 ms (16.1%)
Agent	profiling	1.18 s	121.832 ms (11.5%)
Total	tracing	10.982 s	-
Total	appsec	10.975 s	-7.268 ms (-0.1%)
Total	iast	11.124 s	142.421 ms (1.3%)
Total	profiling	10.94 s	-42.4 ms (-0.4%)

gantt
    title petclinic - break down per module: candidate=1.59.0-SNAPSHOT~8c3688ea03, baseline=1.59.0-SNAPSHOT~78be799166

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.168 ms) : 0, 1168
crashtracking [candidate] (1.174 ms) : 0, 1174
BytebuddyAgent [baseline] (623.114 ms) : 0, 623114
BytebuddyAgent [candidate] (622.151 ms) : 0, 622151
AgentMeter [baseline] (28.695 ms) : 0, 28695
AgentMeter [candidate] (28.8 ms) : 0, 28800
GlobalTracer [baseline] (257.548 ms) : 0, 257548
GlobalTracer [candidate] (257.417 ms) : 0, 257417
AppSec [baseline] (33.24 ms) : 0, 33240
AppSec [candidate] (32.993 ms) : 0, 32993
Debugger [baseline] (62.853 ms) : 0, 62853
Debugger [candidate] (60.301 ms) : 0, 60301
Remote Config [baseline] (624.202 µs) : 0, 624
Remote Config [candidate] (629.186 µs) : 0, 629
Telemetry [baseline] (9.151 ms) : 0, 9151
Telemetry [candidate] (10.737 ms) : 0, 10737
Flare Poller [baseline] (7.712 ms) : 0, 7712
Flare Poller [candidate] (8.459 ms) : 0, 8459
section appsec
crashtracking [baseline] (1.207 ms) : 0, 1207
crashtracking [candidate] (1.173 ms) : 0, 1173
BytebuddyAgent [baseline] (661.877 ms) : 0, 661877
BytebuddyAgent [candidate] (649.929 ms) : 0, 649929
AgentMeter [baseline] (11.952 ms) : 0, 11952
AgentMeter [candidate] (11.824 ms) : 0, 11824
GlobalTracer [baseline] (260.067 ms) : 0, 260067
GlobalTracer [candidate] (256.783 ms) : 0, 256783
AppSec [baseline] (168.669 ms) : 0, 168669
AppSec [candidate] (166.834 ms) : 0, 166834
Debugger [baseline] (68.524 ms) : 0, 68524
Debugger [candidate] (67.151 ms) : 0, 67151
Remote Config [baseline] (686.521 µs) : 0, 687
Remote Config [candidate] (666.491 µs) : 0, 666
Telemetry [baseline] (9.357 ms) : 0, 9357
Telemetry [candidate] (9.322 ms) : 0, 9322
Flare Poller [baseline] (3.74 ms) : 0, 3740
Flare Poller [candidate] (3.644 ms) : 0, 3644
IAST [baseline] (25.982 ms) : 0, 25982
IAST [candidate] (25.367 ms) : 0, 25367
section iast
crashtracking [baseline] (1.174 ms) : 0, 1174
crashtracking [candidate] (1.188 ms) : 0, 1188
BytebuddyAgent [baseline] (789.407 ms) : 0, 789407
BytebuddyAgent [candidate] (791.61 ms) : 0, 791610
AgentMeter [baseline] (11.148 ms) : 0, 11148
AgentMeter [candidate] (11.174 ms) : 0, 11174
GlobalTracer [baseline] (247.583 ms) : 0, 247583
GlobalTracer [candidate] (248.444 ms) : 0, 248444
AppSec [baseline] (33.069 ms) : 0, 33069
AppSec [candidate] (33.086 ms) : 0, 33086
Debugger [baseline] (67.811 ms) : 0, 67811
Debugger [candidate] (67.591 ms) : 0, 67591
Remote Config [baseline] (538.974 µs) : 0, 539
Remote Config [candidate] (546.262 µs) : 0, 546
Telemetry [baseline] (8.569 ms) : 0, 8569
Telemetry [candidate] (8.47 ms) : 0, 8470
Flare Poller [baseline] (3.503 ms) : 0, 3503
Flare Poller [candidate] (3.446 ms) : 0, 3446
IAST [baseline] (26.99 ms) : 0, 26990
IAST [candidate] (26.861 ms) : 0, 26861
section profiling
crashtracking [baseline] (1.231 ms) : 0, 1231
crashtracking [candidate] (1.216 ms) : 0, 1216
BytebuddyAgent [baseline] (677.653 ms) : 0, 677653
BytebuddyAgent [candidate] (673.604 ms) : 0, 673604
AgentMeter [baseline] (8.616 ms) : 0, 8616
AgentMeter [candidate] (8.526 ms) : 0, 8526
GlobalTracer [baseline] (216.485 ms) : 0, 216485
GlobalTracer [candidate] (215.341 ms) : 0, 215341
AppSec [baseline] (32.43 ms) : 0, 32430
AppSec [candidate] (32.019 ms) : 0, 32019
Debugger [baseline] (67.887 ms) : 0, 67887
Debugger [candidate] (67.503 ms) : 0, 67503
Remote Config [baseline] (586.399 µs) : 0, 586
Remote Config [candidate] (591.597 µs) : 0, 592
Telemetry [baseline] (8.681 ms) : 0, 8681
Telemetry [candidate] (8.737 ms) : 0, 8737
Flare Poller [baseline] (3.73 ms) : 0, 3730
Flare Poller [candidate] (3.691 ms) : 0, 3691
ProfilingAgent [baseline] (98.965 ms) : 0, 98965
ProfilingAgent [candidate] (99.055 ms) : 0, 99055
Profiling [baseline] (99.545 ms) : 0, 99545
Profiling [candidate] (99.621 ms) : 0, 99621

Startup time reports for insecure-bank

gantt
    title insecure-bank - global startup overhead: candidate=1.59.0-SNAPSHOT~8c3688ea03, baseline=1.59.0-SNAPSHOT~78be799166

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.057 s) : 0, 1057355
Total [baseline] (8.724 s) : 0, 8723789
Agent [candidate] (1.056 s) : 0, 1056306
Total [candidate] (8.69 s) : 0, 8690203
section iast
Agent [baseline] (1.224 s) : 0, 1223802
Total [baseline] (9.403 s) : 0, 9403053
Agent [candidate] (1.229 s) : 0, 1228637
Total [candidate] (9.36 s) : 0, 9359963

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.057 s	-
Agent	iast	1.224 s	166.447 ms (15.7%)
Total	tracing	8.724 s	-
Total	iast	9.403 s	679.264 ms (7.8%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.056 s	-
Agent	iast	1.229 s	172.331 ms (16.3%)
Total	tracing	8.69 s	-
Total	iast	9.36 s	669.76 ms (7.7%)

gantt
    title insecure-bank - break down per module: candidate=1.59.0-SNAPSHOT~8c3688ea03, baseline=1.59.0-SNAPSHOT~78be799166

    dateFormat X
    axisFormat %s
section tracing
crashtracking [baseline] (1.177 ms) : 0, 1177
crashtracking [candidate] (1.171 ms) : 0, 1171
BytebuddyAgent [baseline] (622.38 ms) : 0, 622380
BytebuddyAgent [candidate] (622.387 ms) : 0, 622387
AgentMeter [baseline] (28.721 ms) : 0, 28721
AgentMeter [candidate] (28.651 ms) : 0, 28651
GlobalTracer [baseline] (256.813 ms) : 0, 256813
GlobalTracer [candidate] (256.944 ms) : 0, 256944
AppSec [baseline] (32.846 ms) : 0, 32846
AppSec [candidate] (32.746 ms) : 0, 32746
Debugger [baseline] (61.663 ms) : 0, 61663
Debugger [candidate] (60.824 ms) : 0, 60824
Remote Config [baseline] (621.653 µs) : 0, 622
Remote Config [candidate] (612.14 µs) : 0, 612
Telemetry [baseline] (9.941 ms) : 0, 9941
Telemetry [candidate] (9.099 ms) : 0, 9099
Flare Poller [baseline] (7.695 ms) : 0, 7695
Flare Poller [candidate] (8.49 ms) : 0, 8490
section iast
crashtracking [baseline] (1.175 ms) : 0, 1175
crashtracking [candidate] (1.187 ms) : 0, 1187
BytebuddyAgent [baseline] (789.431 ms) : 0, 789431
BytebuddyAgent [candidate] (794.242 ms) : 0, 794242
AgentMeter [baseline] (11.122 ms) : 0, 11122
AgentMeter [candidate] (11.33 ms) : 0, 11330
GlobalTracer [baseline] (247.731 ms) : 0, 247731
GlobalTracer [candidate] (247.931 ms) : 0, 247931
AppSec [baseline] (32.823 ms) : 0, 32823
AppSec [candidate] (32.67 ms) : 0, 32670
Debugger [baseline] (66.722 ms) : 0, 66722
Debugger [candidate] (66.467 ms) : 0, 66467
Remote Config [baseline] (541.54 µs) : 0, 542
Remote Config [candidate] (538.217 µs) : 0, 538
Telemetry [baseline] (8.549 ms) : 0, 8549
Telemetry [candidate] (8.543 ms) : 0, 8543
Flare Poller [baseline] (3.498 ms) : 0, 3498
Flare Poller [candidate] (3.458 ms) : 0, 3458
IAST [baseline] (26.822 ms) : 0, 26822
IAST [candidate] (26.816 ms) : 0, 26816

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	smola/ai-guard-content-parts
git_commit_date	1769530654	1769537508
git_commit_sha	`78be799`	`8c3688e`
release_version	1.59.0-SNAPSHOT~78be799166	1.59.0-SNAPSHOT~8c3688ea03

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1769539907	1769539907
ci_job_id	1381047835	1381047835
ci_pipeline_id	93114634	93114634
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-0-m5q89ll7 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-0-m5q89ll7 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 3 performance improvements and 1 performance regressions! Performance is the same for 15 metrics, 17 unstable metrics.

scenario	Δ mean agg_http_req_duration_p50	Δ mean agg_http_req_duration_p95	Δ mean throughput	candidate mean agg_http_req_duration_p50	candidate mean agg_http_req_duration_p95	candidate mean throughput	baseline mean agg_http_req_duration_p50	baseline mean agg_http_req_duration_p95	baseline mean throughput
scenario:load:insecure-bank:iast_GLOBAL:high_load	unsure [+45.836µs; +232.289µs] or [+1.663%; +8.428%]	worse [+270.778µs; +733.068µs] or [+3.544%; +9.594%]	unstable [-206.889op/s; +72.827op/s] or [-15.596%; +5.490%]	2.895ms	8.143ms	1259.531op/s	2.756ms	7.641ms	1326.562op/s
scenario:load:insecure-bank:profiling:high_load	better [-162.086µs; -37.774µs] or [-9.490%; -2.212%]	unstable [-1128.866µs; -281.468µs] or [-22.286%; -5.557%]	unstable [-48.604op/s; +467.479op/s] or [-2.289%; +22.017%]	1.608ms	4.360ms	2332.688op/s	1.708ms	5.065ms	2123.250op/s
scenario:load:petclinic:code_origins:high_load	better [-2.279ms; -1.860ms] or [-11.765%; -9.602%]	better [-2.891ms; -1.805ms] or [-9.306%; -5.812%]	unstable [+0.166op/s; +51.146op/s] or [+0.070%; +21.527%]	17.299ms	28.715ms	263.250op/s	19.368ms	31.063ms	237.594op/s

Request duration reports for insecure-bank

gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.59.0-SNAPSHOT~8c3688ea03, baseline=1.59.0-SNAPSHOT~78be799166
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.179 ms) : 1168, 1191
.   : milestone, 1179,
iast (3.24 ms) : 3194, 3286
.   : milestone, 3240,
iast_FULL (5.733 ms) : 5676, 5791
.   : milestone, 5733,
iast_GLOBAL (3.455 ms) : 3406, 3504
.   : milestone, 3455,
profiling (2.131 ms) : 2111, 2151
.   : milestone, 2131,
tracing (1.854 ms) : 1838, 1870
.   : milestone, 1854,
section candidate
no_agent (1.166 ms) : 1155, 1177
.   : milestone, 1166,
iast (3.214 ms) : 3177, 3251
.   : milestone, 3214,
iast_FULL (5.811 ms) : 5752, 5869
.   : milestone, 5811,
iast_GLOBAL (3.643 ms) : 3589, 3697
.   : milestone, 3643,
profiling (1.932 ms) : 1916, 1948
.   : milestone, 1932,
tracing (1.831 ms) : 1816, 1846
.   : milestone, 1831,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.179 ms [1.168 ms, 1.191 ms]	-
iast	3.24 ms [3.194 ms, 3.286 ms]	2.061 ms (174.7%)
iast_FULL	5.733 ms [5.676 ms, 5.791 ms]	4.554 ms (386.1%)
iast_GLOBAL	3.455 ms [3.406 ms, 3.504 ms]	2.275 ms (192.9%)
profiling	2.131 ms [2.111 ms, 2.151 ms]	951.234 µs (80.7%)
tracing	1.854 ms [1.838 ms, 1.87 ms]	674.299 µs (57.2%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.166 ms [1.155 ms, 1.177 ms]	-
iast	3.214 ms [3.177 ms, 3.251 ms]	2.048 ms (175.7%)
iast_FULL	5.811 ms [5.752 ms, 5.869 ms]	4.645 ms (398.5%)
iast_GLOBAL	3.643 ms [3.589 ms, 3.697 ms]	2.477 ms (212.5%)
profiling	1.932 ms [1.916 ms, 1.948 ms]	766.694 µs (65.8%)
tracing	1.831 ms [1.816 ms, 1.846 ms]	665.321 µs (57.1%)

Request duration reports for petclinic

gantt
    title petclinic - request duration [CI 0.99] : candidate=1.59.0-SNAPSHOT~8c3688ea03, baseline=1.59.0-SNAPSHOT~78be799166
    dateFormat X
    axisFormat %s
section baseline
no_agent (18.984 ms) : 18785, 19182
.   : milestone, 18984,
appsec (18.55 ms) : 18362, 18738
.   : milestone, 18550,
code_origins (19.644 ms) : 19449, 19838
.   : milestone, 19644,
iast (17.606 ms) : 17433, 17779
.   : milestone, 17606,
profiling (18.631 ms) : 18447, 18815
.   : milestone, 18631,
tracing (17.485 ms) : 17312, 17658
.   : milestone, 17485,
section candidate
no_agent (17.643 ms) : 17453, 17832
.   : milestone, 17643,
appsec (18.596 ms) : 18407, 18785
.   : milestone, 18596,
code_origins (17.724 ms) : 17547, 17901
.   : milestone, 17724,
iast (17.554 ms) : 17380, 17727
.   : milestone, 17554,
profiling (19.246 ms) : 19056, 19437
.   : milestone, 19246,
tracing (17.766 ms) : 17592, 17941
.   : milestone, 17766,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	18.984 ms [18.785 ms, 19.182 ms]	-
appsec	18.55 ms [18.362 ms, 18.738 ms]	-433.689 µs (-2.3%)
code_origins	19.644 ms [19.449 ms, 19.838 ms]	660.441 µs (3.5%)
iast	17.606 ms [17.433 ms, 17.779 ms]	-1.377 ms (-7.3%)
profiling	18.631 ms [18.447 ms, 18.815 ms]	-352.507 µs (-1.9%)
tracing	17.485 ms [17.312 ms, 17.658 ms]	-1.498 ms (-7.9%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	17.643 ms [17.453 ms, 17.832 ms]	-
appsec	18.596 ms [18.407 ms, 18.785 ms]	953.049 µs (5.4%)
code_origins	17.724 ms [17.547 ms, 17.901 ms]	81.609 µs (0.5%)
iast	17.554 ms [17.38 ms, 17.727 ms]	-88.82 µs (-0.5%)
profiling	19.246 ms [19.056 ms, 19.437 ms]	1.604 ms (9.1%)
tracing	17.766 ms [17.592 ms, 17.941 ms]	123.816 µs (0.7%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	smola/ai-guard-content-parts
git_commit_date	1769530654	1769537508
git_commit_sha	`78be799`	`8c3688e`
release_version	1.59.0-SNAPSHOT~78be799166	1.59.0-SNAPSHOT~8c3688ea03

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1769539714	1769539714
ci_job_id	1381047836	1381047836
ci_pipeline_id	93114634	93114634
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
kernel_version	Linux runner-zfyrx7zua-project-304-concurrent-0-7kt5ti2k 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux	Linux runner-zfyrx7zua-project-304-concurrent-0-7kt5ti2k 6.8.0-1031-aws #33~22.04.1-Ubuntu SMP Thu Jun 26 14:22:30 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 10 metrics, 2 unstable metrics.

Execution time for biojava

gantt
    title biojava - execution time [CI 0.99] : candidate=1.59.0-SNAPSHOT~8c3688ea03, baseline=1.59.0-SNAPSHOT~78be799166
    dateFormat X
    axisFormat %s
section baseline
no_agent (15.613 s) : 15613000, 15613000
.   : milestone, 15613000,
appsec (14.955 s) : 14955000, 14955000
.   : milestone, 14955000,
iast (17.912 s) : 17912000, 17912000
.   : milestone, 17912000,
iast_GLOBAL (17.899 s) : 17899000, 17899000
.   : milestone, 17899000,
profiling (14.78 s) : 14780000, 14780000
.   : milestone, 14780000,
tracing (14.789 s) : 14789000, 14789000
.   : milestone, 14789000,
section candidate
no_agent (14.961 s) : 14961000, 14961000
.   : milestone, 14961000,
appsec (14.619 s) : 14619000, 14619000
.   : milestone, 14619000,
iast (18.424 s) : 18424000, 18424000
.   : milestone, 18424000,
iast_GLOBAL (17.951 s) : 17951000, 17951000
.   : milestone, 17951000,
profiling (15.256 s) : 15256000, 15256000
.   : milestone, 15256000,
tracing (14.731 s) : 14731000, 14731000
.   : milestone, 14731000,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.613 s [15.613 s, 15.613 s]	-
appsec	14.955 s [14.955 s, 14.955 s]	-658.0 ms (-4.2%)
iast	17.912 s [17.912 s, 17.912 s]	2.299 s (14.7%)
iast_GLOBAL	17.899 s [17.899 s, 17.899 s]	2.286 s (14.6%)
profiling	14.78 s [14.78 s, 14.78 s]	-833.0 ms (-5.3%)
tracing	14.789 s [14.789 s, 14.789 s]	-824.0 ms (-5.3%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	14.961 s [14.961 s, 14.961 s]	-
appsec	14.619 s [14.619 s, 14.619 s]	-342.0 ms (-2.3%)
iast	18.424 s [18.424 s, 18.424 s]	3.463 s (23.1%)
iast_GLOBAL	17.951 s [17.951 s, 17.951 s]	2.99 s (20.0%)
profiling	15.256 s [15.256 s, 15.256 s]	295.0 ms (2.0%)
tracing	14.731 s [14.731 s, 14.731 s]	-230.0 ms (-1.5%)

Execution time for tomcat

gantt
    title tomcat - execution time [CI 0.99] : candidate=1.59.0-SNAPSHOT~8c3688ea03, baseline=1.59.0-SNAPSHOT~78be799166
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.477 ms) : 1465, 1488
.   : milestone, 1477,
appsec (2.509 ms) : 2453, 2564
.   : milestone, 2509,
iast (2.261 ms) : 2191, 2330
.   : milestone, 2261,
iast_GLOBAL (2.317 ms) : 2247, 2387
.   : milestone, 2317,
profiling (2.088 ms) : 2033, 2143
.   : milestone, 2088,
tracing (2.062 ms) : 2009, 2115
.   : milestone, 2062,
section candidate
no_agent (1.48 ms) : 1469, 1492
.   : milestone, 1480,
appsec (3.75 ms) : 3529, 3971
.   : milestone, 3750,
iast (2.265 ms) : 2195, 2334
.   : milestone, 2265,
iast_GLOBAL (2.308 ms) : 2238, 2378
.   : milestone, 2308,
profiling (2.517 ms) : 2353, 2681
.   : milestone, 2517,
tracing (2.077 ms) : 2023, 2130
.   : milestone, 2077,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.477 ms [1.465 ms, 1.488 ms]	-
appsec	2.509 ms [2.453 ms, 2.564 ms]	1.032 ms (69.9%)
iast	2.261 ms [2.191 ms, 2.33 ms]	784.042 µs (53.1%)
iast_GLOBAL	2.317 ms [2.247 ms, 2.387 ms]	840.801 µs (56.9%)
profiling	2.088 ms [2.033 ms, 2.143 ms]	611.628 µs (41.4%)
tracing	2.062 ms [2.009 ms, 2.115 ms]	585.486 µs (39.7%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.48 ms [1.469 ms, 1.492 ms]	-
appsec	3.75 ms [3.529 ms, 3.971 ms]	2.269 ms (153.3%)
iast	2.265 ms [2.195 ms, 2.334 ms]	784.299 µs (53.0%)
iast_GLOBAL	2.308 ms [2.238 ms, 2.378 ms]	827.64 µs (55.9%)
profiling	2.517 ms [2.353 ms, 2.681 ms]	1.036 ms (70.0%)
tracing	2.077 ms [2.023 ms, 2.13 ms]	596.003 µs (40.3%)

smola changed the title ~~[ai-guard] add support for content parts and image URLs~~ Add support for content parts and image URLs Jan 27, 2026

smola added the comp: asm waf Application Security Management (WAF) label Jan 27, 2026

smola changed the title ~~Add support for content parts and image URLs~~ Add support for content parts and image URLs in AI Guard Jan 27, 2026

smola added the type: enhancement Enhancements and improvements label Jan 27, 2026

smola mentioned this pull request Jan 27, 2026

add content part tests for AI Guard in Java DataDog/system-tests#6131

Draft

5 tasks

[ai-guard] add support for content parts and image URLs

8c3688e

smola force-pushed the smola/ai-guard-content-parts branch from 940f8b5 to 8c3688e Compare January 27, 2026 18:13

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add support for content parts and image URLs in AI Guard #10449

Add support for content parts and image URLs in AI Guard #10449

smola commented Jan 27, 2026 •

edited

Loading

Uh oh!

pr-commenter bot commented Jan 27, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Add support for content parts and image URLs in AI Guard #10449

Are you sure you want to change the base?

Add support for content parts and image URLs in AI Guard #10449

Conversation

smola commented Jan 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What Does This Do

Motivation

Additional Notes

Contributor Checklist

Uh oh!

pr-commenter bot commented Jan 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Benchmarks

Startup

Parameters

Summary

Load

Parameters

Summary

Dacapo

Parameters

Summary

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

smola commented Jan 27, 2026 •

edited

Loading

pr-commenter bot commented Jan 27, 2026 •

edited

Loading