AgentScan vs Project Moonshot

AgentScan provides automated security testing for LLMs, RAG pipelines, and autonomous agents through a cloud API and web dashboard. It tests attack patterns including prompt injection, data exfiltration, jailbreaks, and MCP attacks. The product describes 412 vectors across 19 categories, though the Free, Starter, and Pro plans provide smaller subsets. Scan reports include a 0–100 risk score, severity breakdown, remediation advice, and evidence export in JSON or PDF. The dashboard detects agent formats, tracks progress and errors, and lets users adjust throttling. The REST API queues scans, returns a scan ID, and supports completion webhooks. AgentScan maps vulnerabilities to OWASP LLM Top 10 risks and describes links to EU AI Act articles and NIST AI RMF functions; its OWASP mapping excludes Model Denial of Service and Model Theft. Free includes 5 scans per month; paid plans start at $29 a month. The terms restrict scans to agents the customer owns or has explicit written authorization to test.

Project Moonshot is an open-source toolkit for evaluating the safety and reliability of large language models and applications. It runs benchmark tests using open-source datasets and metrics, and generates adversarial prompts to probe possible vulnerabilities and misuse. Users can build custom evaluations with their own datasets, optional prompt templates, metrics, and grading scales. Results appear in interactive HTML reports and downloadable raw JSON. Moonshot provides a Web UI, interactive command-line interface, library APIs, and Web APIs, with configurable connections to model providers including OpenAI, Anthropic, Together, and Hugging Face. Users can also create connectors for other models or applications hosted on custom servers. The toolkit implements benchmarks recommended in IMDA’s Starter Kit for safety testing LLM-based applications. Moonshot is free beta software under Apache License 2.0. Installation uses pip and requires Python 3.11; the Web UI additionally requires Node.js 20.11.1 LTS or later, and test assets are needed to run tests. The installation guide recommends Chrome for the Web UI and notes possible installation difficulties on x86 Macs with moonshot-data dependencies.