Augustus vs RedForge
Augustus
github.comRedForge
github.comSide by side
| Figure | Augustus | RedForge |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · AI Security Testing Tools | 8.2 (#10) | 7.7 (#17) |
| Detectors | It includes 90+ detectors such as pattern matching, LLM-as-a-judge, HarmJudge, Perspective API, and unsafe content detection. | The README lists seven detector types, including YARA-style, similarity, refusal, regex, keyword, code, and unsafe-content detectors. |
| License | The repository identifies Augustus as licensed under Apache 2.0. | The project is released under the Apache 2.0 license, and the README says probe payloads are released under CC0. |
| Providers | It supports 28 LLM provider categories with 43 generator variants, including OpenAI, Anthropic, Azure OpenAI, AWS Bedrock, Vertex AI, Ollama, and custom REST endpoints. | The README lists provider adapters for OpenAI, Anthropic, Google Gemini, AWS Bedrock, Azure OpenAI, Mistral, Ollama, HuggingFace, and generic REST endpoints. |
| Purpose | Augustus is a Go-based LLM vulnerability scanner for security professionals that tests models against adversarial attacks and produces vulnerability reports. | RedForge is an LLM security testing platform for red teaming and vulnerability scanning. |
| Reports | Scan results can be output as tables, JSON, JSONL, or HTML reports. | Scans automatically produce JSON, JSONL audit, and failures reports, with additional HTML, Markdown, SARIF, JSON, audit, and failures formats. |
Plans
In their own words
Augustus
Augustus is a free, self-hosted Go scanner for security professionals assessing large language models. It runs adversarial probes and produces vulnerability reports, with more than 210 probes across 47 attack categories, including jailbreaks, prompt injection, data extraction, safety benchmarks, and agent attacks. It supports 28 provider categories and 43 generator variants, including hosted providers, Ollama, and custom REST endpoints. More than 90 detectors cover approaches such as pattern matching, LLM-as-a-judge, HarmJudge, Perspective API, and unsafe-content detection; seven prompt transformations include encoding, paraphrase, poetry, low-resource-language translation, and case changes. Results can be written as tables, JSON, JSONL, or HTML. The project lists concurrent scanning, rate limits, retries, and timeout handling. Augustus compiles to a portable single binary and can be installed with Go or built from source; the README requires Go 1.27.0 or later. It is Apache 2.0 licensed. The project is intended for authorized security testing, and users are told to test only systems they own or have permission to assess. Provider API use may require credentials.
RedForge
RedForge is a free, open-source LLM security testing platform for red teaming and vulnerability scanning. It runs on Linux, through an API and as self-hosted software. The project lists more than 49 probes, full OWASP LLM Top 10 coverage and YAML probe additions without Python. Attack modules include PAIR, Crescendo multi-turn escalation, Skeleton Key, many-shot jailbreaking and GCG adversarial suffixes. Its mutation engine expands two payloads into 37 variants using encoding, Unicode, cognitive reframing and structural injection strategies. Provider adapters cover OpenAI, Anthropic, Google Gemini, AWS Bedrock, Azure OpenAI, Mistral, Ollama, HuggingFace and generic REST endpoints. Ollama runs locally without an API key. Scans create JSON, JSONL audit and failures reports, with HTML, Markdown and SARIF also available. Compliance reports cover NIST AI RMF, EU AI Act, ISO/IEC 42001, GDPR and OWASP LLM Top 10. RedForge is Apache 2.0 software for authorized use.