Do you sell AI governance or compliance software?Founding Vendor Placement — $499 for 12 months →
EU AI Act · Article 4 active · Article 50 from 2 Aug 2026 · high-risk rules transition through 2027–2028
Directory/Promptfoo
Automatically assured change

SOFTWARE INTELLIGENCE PROFILE

Promptfoo

AI Security & Guardrails

Open-source developer CLI with automated red-teaming, prompt injection benchmarks, and CI/CD security assertions.

HeadquartersSan Francisco, USA
Starting price$0 / $299/mo
Last verified9 Oct 2026Automatically assured change
Source evidence2 recordsAutomated monitoring
PROFILE SNAPSHOT

What this platform provides

2 source records available

Open-source developer CLI with automated red-teaming, prompt injection benchmarks, and CI/CD security assertions.

PROVIDER$0 / $299/mo

Visit official website ↗

CUSTOMER FIT

Deployment & technical profile

Hosting / residency signalUS-Hosted
DeploymentCLI / Local / Cloud
APIAvailable
Python SDKAvailable
On-premiseAvailable
Customer fitSoftware Engineers & LLM Application Developers

Recorded export formats: CI/CD Artifact, JSON, HTML

PROFILE QUALITY

Profile completeness & evidence signals

100/100 completeness
Evidence completeness100%
Technical readiness signalStrong
Requirement mappings3
Editorial stateSource changed — automatically assured

These are transparent catalogue signals used for discovery and prioritisation. They do not establish legal compliance, procurement suitability or endorsement.

CAPABILITIES

Operational capabilities

ai-securitytesting-monitoringgpai-compliance
REGULATORY MAPPING

Relevant compliance capabilities

These are Navigator's recorded capability mappings, not a statement that the vendor itself makes an AI Act compliance guarantee.

  • Article 15 (Continuous Red-Teaming)
  • Supporting capability — AI security testing relevant to transparency workflows

Recorded active / current scope

  • Supporting capability — transparency/security workflow

Recorded prepare / transition scope

  • Article 15 Continuous Red-Teaming
LIMITATIONS

Recorded limitations

  • Developer-first CLI tool; does not include non-technical policy attestation portals
ASSURANCE SIGNALS

Evidence & standards

Labels below are separated by evidence type. A standard, framework, product capability or hosting note is not presented as a certification.

Certifications & attestations

SOC 2 Type II

Standards & frameworks

OWASP Top 10 LLM

Other recorded evidence

No other evidence labels recorded.
Verification methodTechnical Documentation Review
ConfidenceHigh
Source records2
PROVENANCE

Evidence trail

Automatically assured change

Automated monitoring records source availability and change signals. Non-material changes may be automatically assured; material regulatory, certification, commercial or technical changes remain subject to editorial confirmation.

  • Source changed — automatically assured — https://www.promptfoo.dev/ (checked 2026-10-09)
View recorded source URLs
Editorial & legal scope

This profile is informational and based on source information recorded in the Navigator dataset. “Source-checked” describes the Navigator's editorial/data process; it is not a legal certification, conformity assessment, endorsement, or guarantee of regulatory compliance.

Framework reference: Regulation (EU) 2024/1689 · Profile reviewed: 9 Oct 2026

Read the methodology →