AgentScan vs Basilisk

AgentScan provides automated security testing for LLMs, RAG pipelines, and autonomous agents through a cloud API and web dashboard. It tests attack patterns including prompt injection, data exfiltration, jailbreaks, and MCP attacks. The product describes 412 vectors across 19 categories, though the Free, Starter, and Pro plans provide smaller subsets. Scan reports include a 0–100 risk score, severity breakdown, remediation advice, and evidence export in JSON or PDF. The dashboard detects agent formats, tracks progress and errors, and lets users adjust throttling. The REST API queues scans, returns a scan ID, and supports completion webhooks. AgentScan maps vulnerabilities to OWASP LLM Top 10 risks and describes links to EU AI Act articles and NIST AI RMF functions; its OWASP mapping excludes Model Denial of Service and Model Theft. Free includes 5 scans per month; paid plans start at $29 a month. The terms restrict scans to agents the customer owns or has explicit written authorization to test.

Basilisk is an open-source framework for authorized security testing, vulnerability research, and academic study of AI and LLM systems. It includes 32 attack modules across eight categories mapped to the OWASP LLM Top 10. Its Smart Prompt Evolution engine combines 15 mutation operators, five crossover strategies, and multi-signal fitness scoring. Multi-turn modules examine prompt cultivation, authority escalation, and sycophancy exploitation, with guardrail drift monitoring. Basilisk connects to providers including OpenAI, Anthropic, Google, xAI Grok, Groq, Azure OpenAI, GitHub Models, and Ollama, plus custom HTTP or WebSocket endpoints. Reports can be exported as HTML, SARIF 2.1.0, JSON, Markdown, or PDF. GitHub Actions and GitLab CI integrations use SARIF output and can fail pipelines on critical findings. Install options include desktop packages for Windows, macOS, and Linux, pip, Docker, and source. The CLI requires Python 3.11 or higher and an API key for the provider being tested. Prompt evolution, payload mutation, and report generation run locally. It is free under AGPL-3.0. Users must have explicit written authorization before testing systems they do not own.