Skip to content
SPECIFICTION
Get listed

LLMMap

github.com

Free plan Linux
Visit github.com
Spec score 7.5 #19 of 29 in AI Security Testing Tools

Spec sheet

Purpose
LLMMap tests LLM-integrated applications for prompt injection by discovering HTTP injection points, generating targeted prompts, and checking findings for reliability.Read 4 Oct 2026 · github.com
Intended users
The project describes LLMMap as a security testing tool for authorized use and says to test only systems owned by the user or covered by explicit written authorization.Read 4 Oct 2026 · github.com
Burp Suite
LLMMap reads Burp Suite request exports natively and lists proxy support for traffic inspection.Read 4 Oct 2026 · github.com
Data handling
Scan workspaces store request metadata, configuration, and timing; sensitive prompt text and response bodies stay in memory and are not written to disk by default.Read 4 Oct 2026 · github.com
Detection
A Generator LLM creates goal-aware prompts and a Judge evaluates target responses; detector signals can include heuristics and optional semantic similarity.Read 4 Oct 2026 · github.com
Dry run
Dry-run mode plans a scan and selects prompts without making network connections to the target.Read 4 Oct 2026 · github.com
Injection locations
It supports injection in query parameters, request bodies, headers, cookies, and paths.Read 4 Oct 2026 · github.com
Notable limits
The architecture document says adaptive TAP and out-of-band detection modules are reserved for future versions and inactive in the v1.0.0 scan pipeline.Read 4 Oct 2026 · github.com
Obfuscation
Its listed obfuscation methods include base64, homoglyphs, leet speak, and language switching.Read 4 Oct 2026 · github.com
Prompt coverage
It includes 227 prompt injection techniques across 18 attack families in four prompt packs.Read 4 Oct 2026 · github.com
Reliability
Candidate findings are re-tested using Wilson confidence intervals; the documented defaults are five retries and three confirmations.Read 4 Oct 2026 · github.com
Request input
Targets can be supplied as a URL or a Burp Suite request export, with an asterisk marking an injection location.Read 4 Oct 2026 · github.com
Safety
Safe mode is enabled by default and restricts scans to low-risk prompt families, while risky families such as tool abuse and system override are blocked.Read 4 Oct 2026 · github.com
Supported LLMs
The documented backends are Ollama, OpenAI, Anthropic, and Google, with Ollama as the local default that needs no API key.Read 4 Oct 2026 · github.com

Plans and prices

LLMMap Free No charge stated; publicly available under the MIT license. Python >= 3.11 · Requires an LLM backend; Ollama is local, while cloud backends may require API keys Read 4 Oct 2026 · github.com

Every LLMMap plan and price →

Where Specifiction places it

Alternatives to LLMMapAll alternatives →