Basilisk vs PromptRAID
Basilisk
basilisk.rothackers.comPromptRAID
github.comSide by side
| Figure | Basilisk | PromptRAID |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | Yes |
| macOS | Yes | — |
| Linux | Yes | Yes |
| Plans published | 1 | 0 |
| Spec score · AI Security Testing Tools | 8.0 (#11) | 7.0 (#23) |
| License | Basilisk is released under the AGPL-3.0 license, permitting use, copying, modification, and distribution subject to the license and terms. | PromptRAID is distributed under the MIT License, which permits use, copying, modification, distribution, sublicensing, and sale subject to its terms. |
| Purpose | Basilisk is an open-source AI/LLM red teaming framework for authorized security testing, vulnerability research, and academic study. | PromptRAID is an automated prompt injection red-teaming framework for LLM-based agents, mapped to MITRE ATLAS. |
Plans
In their own words
Basilisk
Basilisk is an open-source framework for authorized security testing, vulnerability research, and academic study of AI and LLM systems. It includes 32 attack modules across eight categories mapped to the OWASP LLM Top 10. Its Smart Prompt Evolution engine combines 15 mutation operators, five crossover strategies, and multi-signal fitness scoring. Multi-turn modules examine prompt cultivation, authority escalation, and sycophancy exploitation, with guardrail drift monitoring. Basilisk connects to providers including OpenAI, Anthropic, Google, xAI Grok, Groq, Azure OpenAI, GitHub Models, and Ollama, plus custom HTTP or WebSocket endpoints. Reports can be exported as HTML, SARIF 2.1.0, JSON, Markdown, or PDF. GitHub Actions and GitLab CI integrations use SARIF output and can fail pipelines on critical findings. Install options include desktop packages for Windows, macOS, and Linux, pip, Docker, and source. The CLI requires Python 3.11 or higher and an API key for the provider being tested. Prompt evolution, payload mutation, and report generation run locally. It is free under AGPL-3.0. Users must have explicit written authorization before testing systems they do not own.