AgentDojo vs Giskard
AgentDojo
agentdojo.spylab.aiGiskard
giskard.aiSide by side
| Figure | AgentDojo | Giskard |
|---|---|---|
| Price from | — | Free |
| Free plan | — | Yes |
| Free trial | — | — |
| Open source | — | Yes |
| Web | — | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 0 | 4 |
| Spec score · AI Security Testing Tools | 7.8 (#12) | 8.6 (#5) |
| License | The project's GitHub page identifies its license as MIT. | The public giskard-oss repository is marked Apache-2.0 licensed. |
| Purpose | AgentDojo is a dynamic environment for evaluating prompt injection attacks and defenses for LLM agents. | Giskard describes its platform as a way to find vulnerabilities in AI agents before they reach production. |
Plans
Giskard
- FreeFree
- Open-sourceFree
- EnterprisePriced on request
- ProfessionalPriced on request
In their own words
AgentDojo
AgentDojo has no write-up on Specifiction yet; its figures are above.
Giskard
Giskard provides tools for assessing AI agents before production, with coverage for prompt injection, data disclosure, inappropriate content, hallucinations, contradictions, and omissions. Its Hub performs black-box testing of conversational text-to-text agents available through an API endpoint. An assessment produces a structured report with a deploy-or-fix verdict, ranked vulnerabilities, and functional scenarios; passing agents receive a Giskard Label. Giskard describes a remediation process in which its team qualifies findings, discusses severity, prioritizes issues, opens workflow tickets, and reruns tests to check fixes. Enterprise evaluation options include adversarial probes, domain-specific datasets, RAG quality metrics, customizable metrics, and human review interfaces. Deployment choices include on-premise, private cloud, and SaaS. Giskard lists EU or US data residency, access controls, audit trails, identity-provider integration, encryption, and a zero-training policy, alongside GDPR, SOC 2 Type II, and HIPAA compliance. The free plan includes a local open-source library, basic vulnerability scanning and RAG evaluation, community support, and best-effort maintenance.