Giskard vs Promptfoo

Giskard provides tools for assessing AI agents before production, with coverage for prompt injection, data disclosure, inappropriate content, hallucinations, contradictions, and omissions. Its Hub performs black-box testing of conversational text-to-text agents available through an API endpoint. An assessment produces a structured report with a deploy-or-fix verdict, ranked vulnerabilities, and functional scenarios; passing agents receive a Giskard Label. Giskard describes a remediation process in which its team qualifies findings, discusses severity, prioritizes issues, opens workflow tickets, and reruns tests to check fixes. Enterprise evaluation options include adversarial probes, domain-specific datasets, RAG quality metrics, customizable metrics, and human review interfaces. Deployment choices include on-premise, private cloud, and SaaS. Giskard lists EU or US data residency, access controls, audit trails, identity-provider integration, encryption, and a zero-training policy, alongside GDPR, SOC 2 Type II, and HIPAA compliance. The free plan includes a local open-source library, basic vulnerability scanning and RAG evaluation, community support, and best-effort maintenance.

Promptfoo helps developers and enterprises evaluate prompts and test AI applications for security risks. It compares prompt outputs across multiple models in a web view. Red-team testing simulates users to look for prompt injections, jailbreaks, data leaks, business rule violations and insecure agent tool use. Its getting-started guide lists more than 60 providers, including OpenAI, Anthropic, Google and local models such as Ollama. Integrations include CI systems such as GitHub Actions, GitLab CI, Jenkins, Azure Pipelines, CircleCI and Bitbucket Pipelines, plus Splunk, Burp Suite, Google Sheets and MCP. Installation is available through npm, npx or Homebrew. Promptfoo requires Node.js 22.22.0 or newer and recommends Node.js 24 LTS. The free Community plan includes all LLM evaluation features and 10k red-team probes per month, and can run locally or be self-hosted. Enterprise includes managed cloud deployment; On-Premise runs on customer infrastructure. Promptfoo says it is based in San Francisco, is now part of OpenAI and remains open source.