promptfoo/promptfoo
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic. observed · 2026-10-18
Health v2 · maintenance only
93/100
- Activity 100
- Release rhythm 86
- Longevity 90
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.
- gap_med: 2.0
- age_days: 1271
- days_rel: 12
- days_push: 3
- n_releases_24m: 217
Adoption not part of the score
26091 stars · 2501 forks observed · 2026-10-18
What it is AI-extracted, prompt v1, taxonomy v1, 2026-10-12, confidence 0.97
Promptfoo is an open‑source command‑line tool and library for evaluating, testing, and red‑teaming LLM applications, agents, and RAG pipelines. It provides declarative configs, CI/CD integration, and a web viewer for comparing model outputs and security findings.
Use cases
- Run automated evaluations of prompts across multiple LLM providers.
- Red‑team LLM agents to discover jailbreaks, data leaks, and other vulnerabilities.
- Compare model performance side‑by‑side in a matrix view.
- Integrate prompt testing into CI/CD pipelines for continuous security checks.
- Generate compliance reports mapping findings to standards like OWASP or NIST.
When to choose
- You need a fast, declarative way to test and secure LLM prompts without writing custom code.
- Your workflow includes CI/CD pipelines and you want automated regression testing for LLMs.
- You require built‑in red‑team attack libraries and vulnerability types for agents or RAGs.
- You want a self‑hosted solution that runs locally and can be extended with custom plugins.
When to avoid
- You are looking for a full‑featured LLM serving framework rather than a testing tool.
- Your project relies on languages without Node.js support and you cannot use the CLI.
- You need deep model training or fine‑tuning capabilities, which Promptfoo does not provide.
Facets
cli-tool · maturity active
testing security artificial-intelligence large-language-models cli self-hosted prompt-testing rag-evaluation llm-red-teaming ci-cd-integration open-source ai-agents retrieval-augmented-generation nodejs docker
10 sources
- readme: https://github.com/promptfoo/promptfoo · fetched 2026-10-18 · 16a6a8c7c1c2
- homepage: https://promptfoo.dev · fetched 2026-09-28 · 9f2f14ea73e4
- site_page: https://www.promptfoo.dev/docs/intro · fetched 2026-09-28 · 7ca50fb3e92d
- site_page: https://www.promptfoo.dev/docs/getting-started · fetched 2026-09-28 · 5b1303b68eb3
- site_page: https://www.promptfoo.dev/about · fetched 2026-09-28 · 154a87158917
- site_page: https://www.promptfoo.dev/docs/red-team/llm-vulnerability-types · fetched 2026-09-28 · be71c1028b63
- site_page: https://www.promptfoo.dev/docs/category/integrations · fetched 2026-09-28 · ceaf62756670
- site_page: https://www.promptfoo.dev/red-teaming · fetched 2026-09-28 · b457fcb2dea3
- site_page: https://www.promptfoo.dev/press · fetched 2026-09-28 · 60a2facc7c10
- site_page: https://www.promptfoo.dev/pricing · fetched 2026-09-28 · 9a2d3b083dca
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| promptfoo/promptfoo | main | 93 |
For agents
markdown · JSON · MCP: product_card(name="promptfoo/promptfoo")
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem