AIRTaaS vs Augustus

AIRTaaS is a web platform for continuous security testing and validation of agentic AI applications. Teams connect an AI agent or application, define policies and business rules, then launch red-team and guardrail validations. Tests can rerun when agents, prompts, or policies change, surfacing risks and regressions. Coverage includes prompt injection, jailbreaks, data leakage, hallucinations, bias, harmful outputs, agent chaining abuse, and tool, API, or policy violations. Results provide pass/fail outcomes, risk severity, and reports about attack scenarios, policy violations, and the threat landscape. The platform lists on-demand validations, secured reports, customer-shareable views, controlled sharing, and outcome assurance summaries. Progress tracking includes version history, risk trends, improvement tracking, regression detection, and maturity scoring. Marketplace resources include buyer trust signals, procurement and review support, and validation links or badges. AIRTaaS has a free plan at free and is made by Giggso, headquartered in Michigan, USA.

Augustus is a free, self-hosted Go scanner for security professionals assessing large language models. It runs adversarial probes and produces vulnerability reports, with more than 210 probes across 47 attack categories, including jailbreaks, prompt injection, data extraction, safety benchmarks, and agent attacks. It supports 28 provider categories and 43 generator variants, including hosted providers, Ollama, and custom REST endpoints. More than 90 detectors cover approaches such as pattern matching, LLM-as-a-judge, HarmJudge, Perspective API, and unsafe-content detection; seven prompt transformations include encoding, paraphrase, poetry, low-resource-language translation, and case changes. Results can be written as tables, JSON, JSONL, or HTML. The project lists concurrent scanning, rate limits, retries, and timeout handling. Augustus compiles to a portable single binary and can be installed with Go or built from source; the README requires Go 1.27.0 or later. It is Apache 2.0 licensed. The project is intended for authorized security testing, and users are told to test only systems they own or have permission to assess. Provider API use may require credentials.