Promptfoo

Promptfoo is a security testing platform for AI applications that brings vulnerability checks into your development workflow. It helps teams evaluate agents, chatbots, and other LLM-based apps for attack resilience before release.

AI security in CI/CD

Promptfoo fits into existing engineering pipelines so tests can run automatically as code or prompts change.

• Integrates with GitHub, GitLab, Jenkins, and other CI/CD tools
• Supports MCP and multiple AI agent frameworks
• Deployable in the cloud or on-premise

Attack simulation and vulnerability discovery

The platform generates large volumes of context-aware attacks tailored to your specific application, using a real-world threat stream from a community of 200,000+ developers.

• Detects prompt injection, data leakage, and other common LLM risks
• Automates testing beyond what’s practical with manual scenarios

For product and enterprise teams

Promptfoo is used by companies including dozens in the Fortune 500, and is suitable for both startups and large teams building security- and compliance-sensitive AI services.