DeepTeam vs garak

DeepTeam is an open-source Python framework for red teaming large language model systems. It offers more than 50 ready-to-use vulnerability checks covering bias, toxicity, personal-information leakage, prompt leakage, and security risks. Simulated attacks include jailbreaks, prompt injection, automated evasion, data extraction, and response manipulation. Vulnerability-specific LLM-as-a-Judge metrics return a binary score with reasoning. Supported reference frameworks include OWASP, NIST AI RMF, MITRE ATLAS, the EU AI Act, BeaverTails, and Aegis. Listed model providers include OpenAI, Claude, Gemini, Azure OpenAI, AWS Bedrock, Vertex AI, Mistral, LiteLLM, and Portkey. CI/CD listings include GitHub Actions, GitLab CI, Jenkins, CircleCI, Buildkite, and Azure Pipelines. Installation uses pip in a Python virtual environment, and attacks are dynamically simulated without a prepared dataset. Results can be saved locally or sent to Confident AI for centralized viewing and production red teaming through a UI. The framework is Apache 2.0 licensed and supports self-hosted or API use.

garak is a command-line scanner for probing language models and systems that use them for security weaknesses. Its checks cover issues such as hallucination, data leakage, prompt injection, misinformation, toxicity generation, and jailbreaks. Probes try to elicit failures, while detectors inspect responses for patterns such as unsafe content or a failure to refuse. A standard scan can run without supervision and produce a report, with scan settings available for customization. Integrations include OpenAI, Hugging Face, Cohere, Replicate, AWS Bedrock, LiteLLM, REST-accessible models, and custom Python integrations. Hugging Face models can run locally or be accessed through an inference API or private endpoint. Output includes screen results, a detailed report log, a hit log, and a debug log. garak assesses text output only. It is developed in Linux and OSX and can be installed with pip or from source; listed platforms include Linux, macOS, Windows, and self-hosted use. It is free, with a free plan and no free trial. Listed capabilities include custom metrics, LLM-as-a-judge, and safety evaluations.