Promptfoo

Active, privately held. On March 9, 2026 Promptfoo announced it has agreed to be acquired by OpenAI, subject to customary closing conditions; it states Promptfoo will remain open source. No closing notice found on the vendor's site.

Sources 1, 2, 3, 4 · checked 2026-11-08

• Open-source CLI for red teaming and evals (npx promptfoo redteam setup), run locally or self-hosted
• 50+ vulnerability types including prompt injection, RAG document exfiltration, and PII leaks; tool and function discovery testing for agents
• Findings mapped to OWASP, NIST, EU AI Act, and custom frameworks; vulnerability reports with remediations
• Runs in CI/CD pipelines or on a recurring schedule (continuous testing)
• Guardrails, model security, MCP Proxy, and code scanning products

Sources 1, 2, 3, 4 · checked 2026-11-08

• Engineering teams that want to run red teaming themselves in CI/CD
• Teams that want to start free and move to an enterprise or on-premise tier

Sources 1, 2, 3, 4 · checked 2026-11-08

Community tier free (open source; red teaming capped at 10,000 probes per month). Enterprise and On-Premise: contact vendor for custom pricing.

Sources 1, 2, 3, 4 · checked 2026-11-08

• SOC 2 (homepage badge reads "SOC2 Certified")
• ISO 27001

Listed as stated by the vendor. Scope can differ by product or subsidiary; request current reports.

Sources 1, 2, 3, 4 · checked 2026-11-08

• Pending acquisition by OpenAI; buyers should ask about roadmap, data handling, and contract continuity
• Self-run tool: your team designs scope and triages results unless you buy enterprise support
• Red teaming page does not name MITRE ATLAS

Sources 1, 2, 3, 4 · checked 2026-11-08