- Home
- AI Red Teaming Tools
- OpenSecureAI Scanner
OpenSecureAI Scanner
The company describes itself as global and remote-first rather than listing a physical headquarters.
What it is
OpenSecureAI Scanner checks untrusted text for patterns that may signal prompt injection, jailbreaks, system-prompt leaks, or data exfiltration. Its scanPrompt library API returns a score from 0 to 100, a risk level, and findings for individual rules. Developers can use it through an npm package, CLI, GitHub Action, or REST API; the package targets Node 18+ and has zero runtime dependencies. Authenticated hosted scans add detections for obfuscation, encoding evasions, indirect injection, tool abuse, multilingual overrides, and de-obfuscation. The LLM Gateway can forward prompts to a selected OpenAI, Anthropic, xAI, or Groq provider and scan the response. Documentation says authenticated scans save a dashboard summary but do not store raw prompt text; provider keys for the gateway are not stored or logged. Free access includes in-browser tools and npm packages, while the anonymous API uses the basic engine and has IP rate limiting. The Free plan lists 2,000 API requests per month. Pro is $49 a month. Paid checkout is not self-serve; customers should contact sales for setup.
For and against
For
- Reports a score, risk level, and per-rule findings.
- Available as an npm package, CLI, GitHub Action, and REST API.
- Authenticated scans leave raw prompt text unstored.
- Gateway supports four named provider options.
Against
- The anonymous API uses IP rate limiting.
- Pro costs $49 a month.
- Paid checkout requires contacting sales.
The verdict
OpenSecureAI Scanner offers multiple integration options and more detections through authenticated hosted scans. Consider the request limits and sales-led setup for paid access when choosing a plan.
Who it suits
It suits AI application teams, agent and MCP developers, security and compliance reviewers, learners, and red-teamers. Developers can integrate the scanner through its package, command-line tool, GitHub Action, or API.
Plans and prices
Free
2,000 API requests/month · 30 requests/minute per key · browser tools and npm packages · hosted advanced engine
Read 15 Oct 2026 · opensecureai.com
Pro
50,000 API requests/month · 120 requests/minute per key · hosted AI remediation · hosted LLM Gateway completions
Read 15 Oct 2026 · opensecureai.com
Team
250,000 API requests/month · 300 requests/minute per key · team seats and SSO planned · custom rules and SLA planned
Read 15 Oct 2026 · opensecureai.com
On the record
- Agent Guard
- Agent Guard audits OpenAI, Anthropic and MCP tool definitions for excessive agency, code-execution and SSRF sinks, secret access and cross-tool exfiltration.opensecureai.com · read 15 Oct 2026
- API
- The public REST API exposes scan, unified analysis, agent-guard, gateway, events and threat-feed endpoints.opensecureai.com · read 15 Oct 2026
- CLI and CI
- The scanner and firewall packages include command-line interfaces, and the scanner provides a GitHub Action for pull-request gating.opensecureai.com · read 15 Oct 2026
- Company founding
- OpenSecureAI states that it was founded in 2026 and launched its prompt-injection scanner and platform during 2026.opensecureai.com · read 15 Oct 2026
- Company history
- The About page says OpenSecureAI was founded in 2026 and is global and remote-first.opensecureai.com · read 2 Oct 2026
- Developer use
- The scanner is available as an npm package, CLI, GitHub Action, and REST API, and its package targets Node 18+ with zero runtime dependencies.opensecureai.com · read 2 Oct 2026
- Documentation depth
- Documentation includes installation, library API, CLI flags and exit codes, GitHub Action configuration, REST examples, observability fields, system-prompt auditing and threat-feed queries.opensecureai.com · read 15 Oct 2026
- Free access
- The maker says its in-browser tools and npm packages are free and open, and the anonymous API uses the basic engine with IP rate limiting.opensecureai.com · read 2 Oct 2026
- Gateway integrations
- The gateway names OpenAI, Anthropic, xAI and Groq as supported providers and accepts customer-supplied keys.opensecureai.com · read 15 Oct 2026
- Hosted engine
- Authenticated hosted API calls add private detections for obfuscation and encoding evasions, indirect injection, tool abuse, multilingual overrides, and de-obfuscation.opensecureai.com · read 2 Oct 2026
- Independent domain assessment
- ScamAdviser describes opensecureai.com as very likely safe, citing valid SSL and DNSFilter safety signals.scamadviser.com · read 15 Oct 2026
- Independent package publisher
- The npm profile aistar lists three OpenSecureAI packages: scanner 0.2.0, firewall 0.2.0 and agent-guard 0.1.0.npmjs.com · read 15 Oct 2026
- Independent reputation score
- Gridinsoft reports a 72/100 trust score for opensecureai.com and says no major malware or phishing detections were found.fr.gridinsoft.com · read 15 Oct 2026
- Integrations
- The LLM Gateway can forward prompts to a selected OpenAI, Anthropic, xAI, or Groq provider/model and scan the response.opensecureai.com · read 2 Oct 2026
- Intended users
- The maker identifies AI application teams, agent and MCP developers, security and compliance reviewers, learners, and red-teamers as audiences for its platform.opensecureai.com · read 2 Oct 2026
- Key handling
- The docs state that LLM Gateway provider keys are never stored or logged.opensecureai.com · read 2 Oct 2026
- License status
- OpenSecureAI says its core engine and npm packages are open source, while the hosted advanced engine contains private detections; the pages do not name a specific open-source license.opensecureai.com · read 15 Oct 2026
- Limit: account and enterprise controls
- Team seats, SSO, custom rules and SLA support are marked planned, and paid checkout currently requires contacting sales.opensecureai.com · read 15 Oct 2026
