Goodfire
by Goodfire
Interpretability platform for debugging AI models and guardrailing agents with low-cost activation probes
Goodfire is an AI interpretability company whose tools read a model's internal activations to monitor, debug and guardrail it. It is for teams that train or serve frontier and open-weight models and need cheaper, faster misuse and reward-hacking detection than running a second LLM as a judge on every step.
Goodfire is a San Francisco public benefit corporation that builds interpretability tools, meaning methods for understanding what happens inside a neural network. Its co-founders include CEO Eric Ho and chief scientist Tom McGrath, who founded DeepMind's mechanistic interpretability team, with Dan Balsam as CTO. The LLM offering covers three jobs. Guardrail is a multi-stage, low-latency system that blocks unsafe agent behaviour such as cyber or CBRN misuse at training and inference time. Detect uses activation and action monitors to catch reward hacking during training. Debug traces regressions back to specific training data, environment bugs or runs. The approach puts small probes on the model's internal signals; only exchanges a probe flags go to an LLM judge. In an October 8, 2026 write-up, Goodfire reported deploying cyber-misuse monitors on Kimi K3 and GLM 5.3 inside an SGLang serving stack at about 93% recall with a 5.5% benign interruption rate, roughly 2 to 42 ms of added latency per turn and under $200 per million exchanges. TechCrunch reported the monitors are offered to customers of Baseten, which formed a safety partnership with Hugging Face and Goodfire in September 2026. Goodfire also has a life-sciences line, and its website lists Arc Institute, Mayo Clinic, Microsoft, Prima Mente, Prime Intellect and Rakuten as organizations using its work. It raised a $150 million Series B at a $1.25 billion valuation led by B Capital on February 5, 2026.
AI platform and safety leads at companies that train, fine-tune or serve open-weight models, who own the risk of agent misuse and reward hacking.
Misuse and reward-hacking monitoring that reads the model's own activations, at a small fraction of the cost and latency of judging every turn with another LLM.
At a Glance
- Category
- Governance & Security
- Pricing
- Contact for pricing
- Target Market
- CTOs, Heads of AI, AI Safety Teams, Inference Providers
- Deployment
- Self-hosted
- Headquarters
- San Francisco, United States
Key Features
- ✓Probe-based guardrails
Lightweight probes read internal activations during inference and escalate only flagged exchanges to an LLM judge, which can refuse the request.
- ✓Reward-hacking detection
Activation and action monitors flag reward hacking during RL training so teams can fix environments, adjust rewards or stop runs early.
- ✓Data attribution debugging
Traces harmful or regressed behaviour to specific training datapoints; Goodfire reported a 63% behaviour reduction after filtering them and retraining.
- ✓Serving-engine integration
Probe scores are computed inside SGLang during serving, so monitoring added under about 2% to throughput in Goodfire's tests.
- ✓Configurable risk policies
Customers choose which risks to monitor and whether a flagged event is logged, sent for human review or refused outright.
Capabilities
Use Cases
- •Guardrails for hosted open models
An inference provider runs cyber-misuse probes on Kimi K3 or GLM 5.3 and blocks harmful agent sessions before tool calls execute.
- •Cheaper safety monitoring
Replace an LLM judge on every turn with probes that escalate only suspicious exchanges, cutting judge cost roughly 29 to 49 times per Goodfire.
- •RL training oversight
Monitor reinforcement learning runs for reward hacking and stop or fix a run early instead of discovering the problem after training finishes.
- •Hallucination reduction research
Use probes on internal representations as reward signals; Goodfire reported a 58% hallucination reduction on Gemma 3 12B without benchmark loss.
Ideal For
Best For
- ✓Inference providers that serve open-weight models and need cyber or CBRN misuse guardrails
- ✓Model training teams that need to catch reward hacking in RL runs before wasting compute
- ✓Debugging regressions by tracing harmful behaviour back to specific training datapoints
- ✓Agent platforms that want to block risky tool calls before they execute
- ✓Life-sciences teams interpreting biological foundation models
Not Ideal For
- ✗Companies that only consume closed models through an API, because probes need access to the model's internal activations
- ✗Buyers who want a self-serve product with published pricing; access starts with a demo request
- ✗Teams that need guaranteed blocking, since Goodfire's own results show missed malicious sessions and more benign interruptions
Deployment
Market Analysis
Pros
- ✓Detection published with numbers: about 93% recall at a 5.5% benign interruption rate on Kimi K3
- ✓Probe screening costs under $200 per million exchanges with small added latency
- ✓Well funded, with a $150M Series B and named partners including Microsoft and Mayo Clinic
- ✓Preliminary FAR.AI red-teaming found zero universal jailbreaks across 140 strategies with the monitor on
Cons
- ✗Headline metrics come from Goodfire's own tests on one or two models; TechCrunch noted they are not independently verified
- ✗Monitors still miss about 7% of malicious sessions and raised harmless-session interruptions (from about 5% to 9% on Kimi K3)
- ✗Nonlinear probes lost up to 30% recall out of distribution, and the FAR.AI red-teaming ran for two days with static jailbreaks
- ✗No public pricing, SDK or compliance certifications listed, and it only applies where you control the model weights
Pricing
Goodfire for LLMs
Contact for pricing
- ✓Guardrails and monitors for cyber and CBRN risk
- ✓Reward-hacking detection
- ✓Training data debugging
- ✓Demo request required
Goodfire publishes no list pricing; access starts with a demo request on goodfire.com. Its published monitoring cost is about $65 to $185 per million exchanges in compute and judge cost on Kimi K3, which is a run cost, not a licence price. Baseten customers can reach the monitors through that platform, under terms neither company has disclosed.
Security & Compliance
Connect
Sources
This page was written from 8 sources, 5 on domains other than goodfire.com.
- 1.goodfire.com — languagevendor
- 2.goodfire.com — our series bvendor
- 3.goodfire.com — production cyber monitors on kimi k3vendor
- 4.techcrunch.com — goodfire says its new inside out monitors catch rogue ai age
- 5.techcrunch.com — base labs launches an open weight ai safety partnership with
- 6.venturebeat.com — goodfire raises 7m for its brain surgery like ai observabili
- 7.pulse2.com — goodfire 150 million series b at 1 25 billion valuation rais
- 8.news.ycombinator.com — item
Stay Ahead of the Curve
Weekly enterprise AI insights for technology leaders. No spam, no vendor pitches—unsubscribe anytime.
SubscribeRelated Products
Classie Supervise
Real-time supervision for sanctioned and shadow AI agents, with OPA policies enforced inline across browser, endpoint and cloud
Asymptote Beacon
Open-source endpoint telemetry for AI coding agents, with a paid platform for agent policy and governance
Mave
Agentic SecOps platform that investigates every alert across your existing security tools without ingesting the data
Blackwall
Bot, AI-agent and L7 attack protection that hosting and cloud providers run in their own infrastructure and resell under their brand