AgentScan vs Promptfoo

AgentScan provides automated security testing for LLMs, RAG pipelines, and autonomous agents through a cloud API and web dashboard. It tests attack patterns including prompt injection, data exfiltration, jailbreaks, and MCP attacks. The product describes 412 vectors across 19 categories, though the Free, Starter, and Pro plans provide smaller subsets. Scan reports include a 0–100 risk score, severity breakdown, remediation advice, and evidence export in JSON or PDF. The dashboard detects agent formats, tracks progress and errors, and lets users adjust throttling. The REST API queues scans, returns a scan ID, and supports completion webhooks. AgentScan maps vulnerabilities to OWASP LLM Top 10 risks and describes links to EU AI Act articles and NIST AI RMF functions; its OWASP mapping excludes Model Denial of Service and Model Theft. Free includes 5 scans per month; paid plans start at $29 a month. The terms restrict scans to agents the customer owns or has explicit written authorization to test.

Promptfoo helps developers and enterprises evaluate prompts and test AI applications for security risks. It compares prompt outputs across multiple models in a web view. Red-team testing simulates users to look for prompt injections, jailbreaks, data leaks, business rule violations and insecure agent tool use. Its getting-started guide lists more than 60 providers, including OpenAI, Anthropic, Google and local models such as Ollama. Integrations include CI systems such as GitHub Actions, GitLab CI, Jenkins, Azure Pipelines, CircleCI and Bitbucket Pipelines, plus Splunk, Burp Suite, Google Sheets and MCP. Installation is available through npm, npx or Homebrew. Promptfoo requires Node.js 22.22.0 or newer and recommends Node.js 24 LTS. The free Community plan includes all LLM evaluation features and 10k red-team probes per month, and can run locally or be self-hosted. Enterprise includes managed cloud deployment; On-Premise runs on customer infrastructure. Promptfoo says it is based in San Francisco, is now part of OpenAI and remains open source.