LLMMap

Plans and prices

Every plan, in full

On the record

Burp Suite

LLMMap reads Burp Suite request exports natively and lists proxy support for traffic inspection.github.com · read 4 Oct 2026

Data handling

Scan workspaces store request metadata, configuration, and timing; sensitive prompt text and response bodies stay in memory and are not written to disk by default.github.com · read 4 Oct 2026

Detection

A Generator LLM creates goal-aware prompts and a Judge evaluates target responses; detector signals can include heuristics and optional semantic similarity.github.com · read 4 Oct 2026

Dry run

Dry-run mode plans a scan and selects prompts without making network connections to the target.github.com · read 4 Oct 2026

Injection locations

It supports injection in query parameters, request bodies, headers, cookies, and paths.github.com · read 4 Oct 2026

Intended users

The project describes LLMMap as a security testing tool for authorized use and says to test only systems owned by the user or covered by explicit written authorization.github.com · read 4 Oct 2026

Notable limits

The architecture document says adaptive TAP and out-of-band detection modules are reserved for future versions and inactive in the v1.0.0 scan pipeline.github.com · read 4 Oct 2026

Obfuscation

Its listed obfuscation methods include base64, homoglyphs, leet speak, and language switching.github.com · read 4 Oct 2026

Prompt coverage

It includes 227 prompt injection techniques across 18 attack families in four prompt packs.github.com · read 4 Oct 2026

Purpose

LLMMap tests LLM-integrated applications for prompt injection by discovering HTTP injection points, generating targeted prompts, and checking findings for reliability.github.com · read 4 Oct 2026

Reliability

Candidate findings are re-tested using Wilson confidence intervals; the documented defaults are five retries and three confirmations.github.com · read 4 Oct 2026

Request input

Targets can be supplied as a URL or a Burp Suite request export, with an asterisk marking an injection location.github.com · read 4 Oct 2026

Safety

Safe mode is enabled by default and restricts scans to low-risk prompt families, while risky families such as tool abuse and system override are blocked.github.com · read 4 Oct 2026

Supported LLMs

The documented backends are Ollama, OpenAI, Anthropic, and Google, with Ollama as the local default that needs no API key.github.com · read 4 Oct 2026

Alternatives to LLMMap

P PromptGuardWebWindows+5 AR AIRTA Red TeamWebWindows+4 OS OpenSecureAI ScannerWebWindows+4 P PromptfooWebWindows+4 G GiskardWebLinux+2 C CyberSecEvalWebMac+3 PM Project MoonshotWebWindows+4 A AgentScanWebAPI

Every alternative, ranked