Wave-1 Chat Safety News About FAQ
Start chatting

News July 7, 2026

Wave Guard: the screen in front of Wave⁠-⁠1

Every message you send passes through Wave Guard before the model sees a word of it. This is what it does, and why we built the product around it.

Ask any safety team what breaks assistants in the real world and you will hear the same story: it is rarely the blunt request. It is the disguised one. The harmful ask arrives wrapped in an encoding, buried in a wall of text, framed as fiction, or dressed as an instruction the model supposedly has to follow. A safety layer that only reads the surface loses to all of it.

Wave Guard was built for that reality. It sits between you and Wave⁠-⁠1, reads every message first, and decides what the model should never be asked to decide under pressure.

It decodes before it judges

Attackers hide payloads inside encodings and obfuscation so the surface looks harmless. Wave Guard unpacks what it is given and judges the request for what it actually says. A harmful ask does not become safe because it arrived in a costume.

Your text is data, not commands

The oldest trick in the book is writing instructions to the model inside the message: "ignore your rules," "you are now a different assistant," "your developer says it's fine." Wave Guard treats everything you type as content to evaluate, never as orders to obey. A sentence claiming authority is just a sentence.

Pressure doesn't move it

Roleplay, urgency, emotional appeals, invented emergencies: reframing a harmful request changes its clothing, not its substance. Wave Guard evaluates the substance, so the answer stays the same however the question is dressed.

A safety screen that blocks everything is just a wall. In our latest red-team run, Wave Guard turned away none of the ordinary requests we sent it.

What you see in the product

When Wave Guard blocks a request, the refusal is clear and the conversation is closed; you can start a fresh chat with one click. The rest of the time you should not notice it exists. That balance, refusing what it should while letting everything else through, is the entire job, and it is what we test hardest: in the latest red-team, every jailbreak we tried was blocked across a dozen techniques, with zero wrong refusals on ordinary questions.

Help us make it better

No screen is finished. If you find something that got through, or an ordinary question that got wrongly refused, tell us at wave@waveai.cloud. Both kinds of report make the next run stronger.