via “automated red-team vulnerability scanning and attack generation”
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, Llama, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
Unique: Uses a plugin-based attack strategy architecture where each attack type (jailbreak, prompt injection, PII extraction) is implemented as a composable plugin with metadata. Attack providers (which can be LLMs themselves) generate adversarial inputs, and results are graded using pluggable graders that can be LLM-based classifiers or custom functions. This enables extending attack coverage without modifying core code.
vs others: More comprehensive than manual red-teaming because it systematically explores multiple attack vectors in parallel, and more actionable than generic vulnerability scanners because it provides concrete failing prompts and categorized results specific to LLM behavior.