# AI security guardrails fail across non-English languages, researchers warn
AI models can process dozens of languages, but the safety layers meant to keep them in check predominantly speak English. A Dark Reading investigation published last month highlights a growing concern: organizations operating across multiple languages face uneven protection against jailbreaks, prompt injection, and unsafe model outputs.
The report centers on findings from AI security vendor DeepKeep, which published a blog post on July 22 titled "Your AI Speaks 100 Languages. Your AI Security Layer Doesn't." The core problem is that leading models from OpenAI, Google, and Anthropic demonstrate strong performance in roughly 30 to 40 languages, but safety tuning, behavior alignment, and reinforcement learning rely heavily on English-speaking annotators.
English benefits from disproportionate training data and tokenization schemes that represent it more efficiently than other languages. Academic research shows LLMs perform logic, reasoning, coding, and math tasks best when prompted in English. Less-supported languages like Welsh and Swahili can handle only basic prompts and may produce grammatical errors.
The security gap emerges because guardrails built on top of models inherit these disparities. A jailbreak attempt phrased in a less-supported language may bypass filters that would catch the same attempt in English. Security intent can shift during translation, making malicious prompts less explicit and harder to detect.
European organizations face particular exposure. The EU's regulatory and economic bloc encompasses dozens of languages, and cross-border operations are routine. A model that safely handles French or German may not apply the same constraints when prompted in Hungarian or Maltese.
Chinese models like Qwen and DeepSeek outperform Western models on Chinese text and cultural context, representing a partial exception to the English-centric pattern. Some initiatives are underway to improve language support in Europe and the Middle East, but the gap remains wide.
Runtime AI firewalls and policy enforcement tools offer a partial mitigation, blocking suspicious tool calls, preventing data exfiltration, and logging prompt injection attempts. These tools add a separate enforcement layer independent of the model's own safety training, but their effectiveness across all languages is not yet well documented.
## Sources
- [Europe's Multilingual Reality Exposes AI Security Gaps](https://www.darkreading.com/cybersecurity-operations/europes-multilingual-reality-exposes-ai-security-gaps) - Dark Reading, July 24, 2026 - [Your AI Speaks 100 Languages. Your AI Security Layer Doesn't](https://www.deepkeep.ai/blog/your-ai-speaks-100-languages-your-ai-security-layer-doesnt) - DeepKeep, July 22, 2026
