It suits application teams that want to inspect LLM requests before they reach a provider, including for prompt injection, PII, or data leakage risks.
Free plan From $19 a month WebWindowsMacLinuxBrowser extensionAPI+1
- Home
- Developer Tools
- AI Security Testing Tools
Best AI Security Testing Tools 2026
Facts read 30 Sep 2026 – 21 Oct 2026
When you’re evaluating safeguards for AI systems, compare what each tool lets you test: custom cases, data leakage, jailbreaks, prompt injection, and unsafe outputs. Deployment mode, API-independent access details such as a free plan, and paid-from pricing can help narrow options to fit your environment and budget. Among the named tools are F5 BIG-IP APM, Project Moonshot, and AgentScan, with OpenSecureAI Scanner, PromptGuard, Augustus, Basilisk, and Giskard also represented. Consider which threat behaviors you need to examine and whether the available deployment and pricing details suit your development workflow.
The standings: top 10
| Name | In a line | Record score | Price from | Try it free | Runs on | Facts read |
|---|---|---|---|---|---|---|
| 01 PromptGuard | It suits application teams that want to inspect LLM requests before they reach a provider, including for prompt injection, PII, or data leakage risks. | 5.7 | $19 a month | Free plan | Web, Windows, Mac, Linux | 14 Oct 2026 |
| 02 AIRTA Red Team | It is aimed at red teams, whitehat testers, pentesters, and AppSec or MLsec teams assessing LLM behavior. | 5.6 | Free plan | Free plan | Web, Windows, Mac, Linux | 15 Oct 2026 |
| 03 OpenSecureAI Scanner | It suits AI application teams, agent and MCP developers, security and compliance reviewers, learners, and red-teamers. | 5.6 | $49 a month | Free plan | Web, Windows, Mac, Linux | 15 Oct 2026 |
| 04 Promptfoo | Promptfoo is for developers and enterprises building AI applications who need prompt evaluation or red-team testing. | 5.3 | Free plan | Free plan | Web, Windows, Mac, Linux | 15 Oct 2026 |
| 05 Giskard | It suits teams assessing conversational AI agents for safety and quality issues before production. | 5.2 | Free plan | Free plan | Web, Linux, API, Self-hosted | 21 Oct 2026 |
| 06 CyberSecEval | CyberSecEval suits people evaluating cybersecurity risks or defensive behavior in large language models. | 5.1 | Free plan | Free plan | Web, Mac, Linux, API | 15 Oct 2026 |
| 07 Project Moonshot | Moonshot is intended for AI developers and compliance teams evaluating LLMs and LLM-based applications. | 4.9 | Free plan | Free plan | Web, Windows, Mac, Linux | 30 Sep 2026 |
| 08 AgentScan | It may suit teams that need API-based security scans for LLMs, RAG pipelines, or autonomous agents. | 4.8 | $29 a month | Free plan | Web, API | 3 Oct 2026 |
| 09 Augustus | Augustus is intended for security professionals assessing LLM vulnerabilities. | 4.8 | Free plan | Free plan | Windows, Mac, Linux, Self-hosted | 4 Oct 2026 |
| 10 Basilisk | It suits security researchers, AI developers, and academic users conducting authorized LLM assessments. | 4.8 | Free plan | Free plan | Windows, Mac, Linux | 30 Sep 2026 |
02
AIRTA Red Team
It is aimed at red teams, whitehat testers, pentesters, and AppSec or MLsec teams assessing LLM behavior.
WebWindowsMac+3 Record5.6 Visit
03
OpenSecureAI Scanner
It suits AI application teams, agent and MCP developers, security and compliance reviewers, learners, and red-teamers.
WebWindowsMac+3 Record5.6 Visit
04
Promptfoo
Promptfoo is for developers and enterprises building AI applications who need prompt evaluation or red-team testing.
WebWindowsMac+3 Record5.3 Visit
05
Giskard
It suits teams assessing conversational AI agents for safety and quality issues before production.
WebLinuxAPI+1 Record5.2 Visit
6
CyberSecEval
WebMacLinux+2 Free plan Record5.1 Visit CyberSecEval suits people evaluating cybersecurity risks or defensive behavior in large language models.
7
Project Moonshot
WebWindowsMac+3 Free plan Record4.9 Visit Moonshot is intended for AI developers and compliance teams evaluating LLMs and LLM-based applications.
8
AgentScan
WebAPI $29 a month Record4.8 Visit It may suit teams that need API-based security scans for LLMs, RAG pipelines, or autonomous agents.
9
Augustus
WindowsMacLinux+1 Free plan Record4.8 Visit Augustus is intended for security professionals assessing LLM vulnerabilities.
10
Basilisk
WindowsMacLinux Free plan Record4.8 Visit It suits security researchers, AI developers, and academic users conducting authorized LLM assessments.
11
PyRIT
WebWindowsMac+3 Free plan Record4.7 Visit PyRIT suits teams assessing generative AI systems through structured red-team exercises, as well as developers building custom assessment workflows.
14
RedForge
LinuxAPISelf-hosted Free plan Record4.5 Visit RedForge suits security teams and developers authorized to test LLM applications.
16
AIRTaaS
Web Free plan Record4.3 Visit It is relevant to teams that want to validate agent behavior and track risks as systems change.
19
Crucible
LinuxSelf-hosted Free plan Record4.2 Visit It suits individual builders, open-source projects, and teams shipping AI agents.
More in Developer Tools
Accessibility Testing Software 169Log Management Software 111AI Coding Assistants 103Package Managers 93AI Agent Platforms 73Reverse Engineering Tools 73Integrated Development Environments 65Software Composition Analysis Software 65Artifact repository software 64Browser Automation Tools 62Version Control Software 62Container Registries 60Code Playground Software 58Continuous Integration Software 58Network Monitoring 55Kubernetes Monitoring 54Database Client Software 53IDE Software 53