garak vs HarmBench
garak
garak.aiHarmBench
github.comSide by side
| Figure | garak | HarmBench |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | Yes |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 0 |
| Spec score · LLM Evaluation Tools | 7.8 (#12) | 7.2 (#21) |
| Spec score · AI Security Testing Tools | 7.8 (#15) | 7.1 (#22) |
| Purpose | garak is an LLM vulnerability scanner that probes language models and systems using them for security weaknesses. | HarmBench is an open-source framework for evaluating automated red teaming methods and LLM attacks and defenses. |
| Support | The project points users to its user guide, reference documentation, Discord, GitHub issues, and an NVIDIA email address for support. | The repository documentation invites users to submit a pull request for support for another cluster manager. |
Plans
In their own words
garak
garak is a command-line scanner for probing language models and systems that use them for security weaknesses. Its checks cover issues such as hallucination, data leakage, prompt injection, misinformation, toxicity generation, and jailbreaks. Probes try to elicit failures, while detectors inspect responses for patterns such as unsafe content or a failure to refuse. A standard scan can run without supervision and produce a report, with scan settings available for customization. Integrations include OpenAI, Hugging Face, Cohere, Replicate, AWS Bedrock, LiteLLM, REST-accessible models, and custom Python integrations. Hugging Face models can run locally or be accessed through an inference API or private endpoint. Output includes screen results, a detailed report log, a hit log, and a debug log. garak assesses text output only. It is developed in Linux and OSX and can be installed with pip or from source; listed platforms include Linux, macOS, Windows, and self-hosted use. It is free, with a free plan and no free trial. Listed capabilities include custom metrics, LLM-as-a-judge, and safety evaluations.