OpenSecureAI Scanner vs RedLens AI

OpenSecureAI Scanner checks untrusted text for patterns that may indicate prompt injection, jailbreaks, system-prompt leaks, or data exfiltration. Its scanPrompt library API returns a 0–100 score, a risk level, and findings for individual rules. Developers can access it as an npm package, CLI, GitHub Action, or REST API; the package targets Node 18+ and has zero runtime dependencies. Authenticated hosted API calls add detections for obfuscation and encoding evasions, indirect injection, tool abuse, multilingual overrides, and de-obfuscation. The LLM Gateway can route prompts to a selected OpenAI, Anthropic, xAI, or Groq provider and scan the response. Documentation says authenticated scans save a summary to the dashboard but do not store raw prompt text; gateway provider keys are not stored or logged. Free access includes in-browser tools and npm packages, while the anonymous API uses the basic engine with IP rate limiting. The Free plan lists 2,000 API requests per month. Pro costs $49 a month, but paid checkout is not self-serve and requires contacting sales.

RedLens AI runs automated adversarial attacks against production AI systems and maps findings to controls used in security audits. It is aimed at healthcare, law enforcement and regulated enterprise organizations deploying AI. Its Master Attack Schema v2.0 covers six attack categories and 22 methodologies, with findings scored by CVSS. Each assessment produces a PDF containing a risk score, vulnerabilities, remediation steps and mappings to frameworks including HIPAA, NIST AI RMF, OWASP GenAI Top 10, MITRE ATLAS, ISO/IEC 42001, FBI CJIS Security Policy and AIUC-1. The mappings are evidence, not certification. Retests can run daily or weekly to detect drift, and critical findings can trigger logged email alerts. A Python CLI and GitHub Action support CI/CD scans with severity gates and SARIF output; findings can stream to listed SIEM services or an HMAC-signed webhook. Deployment options include hosted SaaS and Enterprise self-hosted Docker. In the self-hosted package, stored data stays in the customer's Postgres, but attack generation and judging still call Anthropic's API using the customer's key. The Free plan includes 25 hosted scans monthly; paid plans start at $199.00 per month, while Developer starts at $799.00 per month.