Red teaming
Attacking a system deliberately to find what it will do wrong: prompt-injection suites, jailbreak corpora, automated adversaries. Blocking an attack in flight is guardrails.
18 in this category
NARROW BY WHAT THIS CATEGORY ASKS
LICENCE · 2 NOT READ
OPEN SOURCE · 8 NOT READ
CONTINUOUS TESTING · 16 NOT READ
PRODUCTUSED BYSTARSDOWNLOADS 30D
strixOpen-source AI penetration testing tool to find and fix your app’s vulnerabilities.64,009
garakLLM vulnerability scanner9,32554,931
superagentSuperagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.6,749
AI-Infra-GuardA full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.6,536
cyberstrikeOpen-source AI-powered offensive security harness for automated penetration testing.2,703
beelzebubA secure low code deception runtime framework, leveraging AI for System Virtualization.2,172Aagentic_securityAgentic LLM Vulnerability Scanner / AI red teaming kit 🧪1,990
fuzzyaiA powerful tool for automated LLM fuzzing. It is designed to help developers and security researchers identify and mitigate potential jailbreaks in their LLM APIs.1,572
SplxAIA security scanner for your LLM agentic workflows1,050
MedusaAI-first security scanner. NEW in v2026.7: Claude Code compromise detection — vet .claude/ hooks, permissions & skills before you clone — plus an always-on AI attack-signature scanner and native Rust 980
dark-moonAutonomous AI pentesting engine across web, cloud, identity, CI/CD, IaC, databases, Active Directory, Kubernetes, IoT firmware and AI/LLM endpoints (OWASP LLM Top 10). Real exploits with proof for eve917
easyjailbreakAn easy-to-use Python framework to generate adversarial jailbreak prompts.909CcybermesAutonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.781
h5iFast, red-teaming browser built for AI agents, with direct HTTP traffic control, sandboxed execution, and auditable sessions. Pure Rust.637
agenthoundOffensive security framework for AI agent infrastructure - recon, credential looting, model exfiltration, poisoning, and attack-path analysis across MCP, A2A, gateways, and AI services. BloodHound for423
AgentSealSecurity toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection resistance, and audit live MCP servers for tool poisonin371DdiffattackAn unrestricted attack based on diffusion models that can achieve both good transferability and imperceptibility.266
LakeraLakera: The AI-Native Security Platform to Accelerate GenAISORTED BY ONE STATED COLUMN · USED BY = LISTED PRODUCTS DEPENDING ON IT, IN THIS DIRECTORY — NOT A POPULARITY FIGURE · NO OVERALL SCORE AND NO RANK COLUMN, BECAUSE BLENDING ADOPTION, STARS AND DOWNLOADS NEEDS WEIGHTS, AND WEIGHTS ARE AN OPINION PRESENTED AS ARITHMETIC
Cite this page
The count and its date sit inside the citation, because “Red teaming” without a date is a claim that quietly goes wrong as the category fills.
infratoapp, “Red teaming — Security / Governance”, read 28 October 2026. 18 listed products. https://www.infratoapp.com/layers/security/red-teaming
No overall score, and no rank column
Blending adoption, stars and downloads needs weights, and weights are an opinion presented as arithmetic — so this table sorts by one stated column at a time and shows which. This view holds no billing column and joins no billing table: a sponsor cannot appear higher, and the signals meter is a row’s own confidence, never a score you can sort on.
Frequently asked
What is in the Red teaming category?
18 products in the Security / Governance layer of the AI stack. Attacking a system deliberately to find what it will do wrong: prompt-injection suites, jailbreak corpora, automated adversaries. Blocking an attack in flight is guardrails. Listed members include strix, garak and superagent. Every fact on each listing carries the page it was read from and the date it was read.
How are Red teaming compared here?
By the 6 attributes this category declares, asked of every member and answered only where a source states it. A product with no answer on record shows a gap rather than a guess, and no blended score is published — weights would be an opinion presented as arithmetic.
strix or garak?
Both are listed under Red teaming. We publish no verdict between them — we hold no benchmark that would support one. What we do hold is the same attribute sheet for each, side by side with the source behind every value, at /compare/garak-vs-strix.
What does a blank mean on a red teaming row?
That nobody has told us, not that the answer is no. A hollow ring is "no answer on record", which is a different state from a recorded no — and the two look different on purpose. A listing with a blank has not failed the question; it has not been read for it.
How often are red teaming figures re-read?
Every value carries the date it was read and a link to the page it came from. Prices move fastest and are re-read most often; an attribute read weeks ago says so rather than presenting itself as current. Anything past 21 days is hidden rather than shown stale.
Is this every red teaming there is?
No. This is 18 we have read and can cite. A directory that claimed completeness would be making a promise it cannot keep, so the page states its own count instead and says when a category is too thin to shortlist from.
Can a vendor pay to rank higher here?
No. Nothing on this page can be bought: a sponsor cannot enter a table, reorder a row or change a mark, and there is no ranked position for sale. How the site is paid for, and the line each source of money does not cross, is set out under money and independence at /our-data#sec5.