garak vs RedAmon

garak is a command-line scanner for probing language models and systems that use them for security weaknesses. Its checks cover issues such as hallucination, data leakage, prompt injection, misinformation, toxicity generation, and jailbreaks. Probes try to elicit failures, while detectors inspect responses for patterns such as unsafe content or a failure to refuse. A standard scan can run without supervision and produce a report, with scan settings available for customization. Integrations include OpenAI, Hugging Face, Cohere, Replicate, AWS Bedrock, LiteLLM, REST-accessible models, and custom Python integrations. Hugging Face models can run locally or be accessed through an inference API or private endpoint. Output includes screen results, a detailed report log, a hit log, and a debug log. garak assesses text output only. It is developed in Linux and OSX and can be installed with pip or from source; listed platforms include Linux, macOS, Windows, and self-hosted use. It is free, with a free plan and no free trial. Listed capabilities include custom metrics, LLM-as-a-judge, and safety evaluations.

RedAmon is a free, open-source framework for authorized red-team operations, including reconnaissance, exploitation and post-exploitation. It maps attack surfaces from domains, IP/CIDR targets or batches of domains, then merges findings into a Neo4j graph that its AI agent can query for planning and exploitation. GVM/OpenVAS provides network vulnerability scanning with more than 170,000 NVTs; separate tools detect secrets and scan for vulnerable or malicious packages against a local OSV database. The Secret Multiscanner has 1,060 detectors across 14 sources and optional live API verification. RedAmon supports twelve AI providers and more than 400 language models, and its MCP server lets external agents drive the framework. The Dockerized application runs on Linux, macOS and Windows and supports on-prem deployment. Tools, scanners and agents run in separate containers with per-job ephemeral filesystems and network namespaces. Rules of Engagement, approval gates and scope controls govern operations, with a guardrail blocking government, military and intergovernmental targets. The project warns that configured API keys and credentials are stored unencrypted in PostgreSQL, leaving database security to the user.