DeepTeam vs Promptfoo
DeepTeam
trydeepteam.comPromptfoo
promptfoo.devSide by side
| Figure | DeepTeam | Promptfoo |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | Yes |
| Web | — | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 3 |
| Spec score · AI Red Teaming Tools | 7.8 (#10) | 8.6 (#4) |
| Spec score · AI Security Testing Tools | 7.7 (#16) | 8.5 (#6) |
| License | The site describes DeepTeam as an open-source LLM red teaming framework licensed under Apache 2.0. | The open-source project is distributed under the MIT license. |
| Model providers | The site lists OpenAI, Claude, Gemini, Azure OpenAI, AWS Bedrock, Vertex AI, Mistral, LiteLLM, and Portkey among model providers. | Provider documentation covers OpenAI, Anthropic, Google, Vertex, HTTP, JavaScript, Python, Ruby, shell, OpenAI Agents, and other services. |
Plans
In their own words
DeepTeam
DeepTeam is an open-source Python framework for red teaming large language model systems. It offers more than 50 ready-to-use vulnerability checks covering bias, toxicity, personal-information leakage, prompt leakage, and security risks. Simulated attacks include jailbreaks, prompt injection, automated evasion, data extraction, and response manipulation. Vulnerability-specific LLM-as-a-Judge metrics return a binary score with reasoning. Supported reference frameworks include OWASP, NIST AI RMF, MITRE ATLAS, the EU AI Act, BeaverTails, and Aegis. Listed model providers include OpenAI, Claude, Gemini, Azure OpenAI, AWS Bedrock, Vertex AI, Mistral, LiteLLM, and Portkey. CI/CD listings include GitHub Actions, GitLab CI, Jenkins, CircleCI, Buildkite, and Azure Pipelines. Installation uses pip in a Python virtual environment, and attacks are dynamically simulated without a prepared dataset. Results can be saved locally or sent to Confident AI for centralized viewing and production red teaming through a UI. The framework is Apache 2.0 licensed and supports self-hosted or API use.
Promptfoo
Promptfoo helps developers and enterprises evaluate prompts and test AI applications for security risks. It compares prompt outputs across multiple models in a web view. Red-team testing simulates users to look for prompt injections, jailbreaks, data leaks, business rule violations and insecure agent tool use. Its getting-started guide lists more than 60 providers, including OpenAI, Anthropic, Google and local models such as Ollama. Integrations include CI systems such as GitHub Actions, GitLab CI, Jenkins, Azure Pipelines, CircleCI and Bitbucket Pipelines, plus Splunk, Burp Suite, Google Sheets and MCP. Installation is available through npm, npx or Homebrew. Promptfoo requires Node.js 22.22.0 or newer and recommends Node.js 24 LTS. The free Community plan includes all LLM evaluation features and 10k red-team probes per month, and can run locally or be self-hosted. Enterprise includes managed cloud deployment; On-Premise runs on customer infrastructure. Promptfoo says it is based in San Francisco, is now part of OpenAI and remains open source.