OpenSecureAI Scanner vs RedFang

OpenSecureAI Scanner checks untrusted text for patterns that may indicate prompt injection, jailbreaks, system-prompt leaks, or data exfiltration. Its scanPrompt library API returns a 0–100 score, a risk level, and findings for individual rules. Developers can access it as an npm package, CLI, GitHub Action, or REST API; the package targets Node 18+ and has zero runtime dependencies. Authenticated hosted API calls add detections for obfuscation and encoding evasions, indirect injection, tool abuse, multilingual overrides, and de-obfuscation. The LLM Gateway can route prompts to a selected OpenAI, Anthropic, xAI, or Groq provider and scan the response. Documentation says authenticated scans save a summary to the dashboard but do not store raw prompt text; gateway provider keys are not stored or logged. Free access includes in-browser tools and npm packages, while the anonymous API uses the basic engine with IP rate limiting. The Free plan lists 2,000 API requests per month. Pro costs $49 a month, but paid checkout is not self-serve and requires contacting sales.

RedFang is a cloud AI red-team scanner aimed at indie builders. It scans AI agents, GitHub repositories and application URLs, including listed customer-service chatbot targets. Before scanning, it requires a TXT-record or file-upload challenge to verify target ownership. RedFang says scans take five minutes and return grades from A+ to F. Seven v1 categories cover direct prompt injection, tool misuse, sensitive data leakage, output-as-attack-vector, agent overreach, denial-of-wallet and system-prompt extraction. Repository scans look for exposed keys, broken authentication and AI-introduced bugs. The stated methodology follows the OWASP LLM Top 10 threat model and tests 12 known direct prompt-injection patterns per scan. Reports can include plain-language findings, the successful prompt, a curl reproduction command, fix code and a retest. PDF and HTML exports are listed. Free preview costs nothing; Full report costs $19 a month. A shareable badge shows the latest grade, with weekly, daily or continuous scan cadence by tier.