Mistral AI Releases Shieldstral 1.0 3B Safety Classifier

Mistral AI has released Shieldstral 1.0 3B, an open-weights, policy-adaptive multimodal safety classifier designed to handle content moderation by framing it as a single yes/no question rather than relying on a predefined taxonomy of harm categories. Unlike many existing guardrail models that embed their category lists directly into their weights, requiring retraining for new deployment contexts, Shieldstral allows operators to define policies using plain-language questions at inference time. The model then returns a calibrated safety score after a single forward pass. This approach enables dynamic policy adaptation, allowing content that might be acceptable in one context, such as a cybersecurity research tool, to be flagged as harmful in another, like a mental-health platform. Shieldstral 1.0 3B is built upon the Ministral-3-3B-Base-2512 model and incorporates a native Pixtral vision encoder. It is released under the permissive Apache 2.0 license, permitting both commercial and non-commercial use. In performance evaluations, Shieldstral reports an 84.9% average F1 score for text safety, a performance level that matches the GPT-OSS-Safeguard-20B model. For multimodal safety, it achieves an 83.8% F1 score, outperforming all other baselines evaluated by Mistral. The model's architecture and size make it deployable locally. Shieldstral-1.0-3B requires 16GB of VRAM when using BF16 precision and can operate on a single GPU. Serving the model is facilitated through multiple established pathways, including vLLM (version 0.26.0 and later, recommended), llama.cpp via GGUF conversion with Q8_0, Q5_K_M, or Q4_K_M quantization, SGLang, and the Transformers library. Fine-tuning is also supported through the Axolotl framework. The classifier's output is a single token, which contributes to significantly lower latency and cost compared to reasoning-based guardrails like GPT-OSS-Safeguard-20B. The 16GB VRAM requirement positions Shieldstral 1.0 3B as an accessible solution for early-stage AI product teams that may not have the resources to contract with dedicated moderation vendors. Furthermore, its open license and self-hosting capabilities are advantageous for mid-market and enterprise organizations that require guardrails within their Virtual Private Cloud (VPC) or on-premises infrastructure to comply with data residency regulations and facilitate auditing. Multi-tenant SaaS providers can also benefit, as a single checkpoint can be configured to enforce distinct policies for each customer. The model is particularly relevant for industries such as consumer social media and user-generated content platforms, educational technology and child safety applications, healthcare and mental health services, fintech and insurance support automation, gaming and voice chat services, and marketing technology.