All articles
Practitioner comparisons of LLM security scanners. Garak, PyRIT, promptmap, vendor LLM-specific scanners — coverage gaps, false-positive profiles, integration cost, and the cases where 'best' depends on what you're actually defending.
-
LLM Pentesting Checklist: 8 Test Areas Mapped to OWASP
An LLM pentesting checklist in eight test areas, from prompt injection to tool abuse, mapped to OWASP LLM Top 10 2026, MITRE ATLAS and AITG test IDs.
-
LLM Prompt Scanning: What It Catches and What It Misses
LLM prompt scanning checks prompts, retrieved documents and tool results before the model reads them. What it catches and what still slips past.
-
LLM Jailbreak Detection Techniques Explained by Layer
Jailbreak detection by layer: what perplexity filters, input classifiers, output guards and multi-turn monitoring each catch, and what they still miss.
-
How LLM Vulnerability Scanners Work: Inside the Scan Loop
Inside an LLM vulnerability scan: target adapters, probe corpora, attack mutation, repeat runs, detector grading, and what a green run does not prove.
-
LLM Security Tools: The 2026 Category Map
The six categories of LLM security tools compared: pre-deployment scanners, red-team frameworks, injection detectors, guardrails, gateways, model scanners.
-
NeMo Guardrails: What Colang Rails Enforce
How NVIDIA NeMo Guardrails works: the five rail types, Colang dialog flows, the guardrails server, and the latency and coverage limits to plan for first.
-
How to Scan an LLM for Prompt Injection: Tools and Limits
A guide to scanning LLM applications for prompt injection: offline probe suites, runtime classifiers, and what a clean scan does and does not prove.
-
Best Tools to Test AI Chatbot Security in 2026
Garak, PyRIT, Promptfoo, Giskard, and Lakera Red compared as tools to test AI chatbot security across full conversations, not single-shot prompts.
-
How to Detect Prompt Injection Vulnerabilities in LLM Apps
A practitioner's guide to detecting prompt injection vulnerabilities: input classifiers, output validators, structural controls, and red-team testing.
-
OWASP LLM Top 10 2026 Scanning Checklist by Layer
OWASP LLM Top 10 scanning checklist for the 2026 list, with a 2025 crosswalk: what to test per risk and which scanners (garak, PyRIT, promptfoo) cover it.
-
Best LLM Vulnerability Scanners 2026: Tools Compared
A practitioner's guide to the best LLM vulnerability scanners in 2026: Garak, PyRIT, Promptfoo and Mindgard, plus the specialist and runtime layers.
-
Open Source LLM Red Teaming Tools Compared
A practitioner's guide to the main open source LLM red teaming tools: what PyRIT, Garak, HarmBench, and TextAttack cover and where they fall short.
-
LLM Red Teaming Tools: garak vs PyRIT vs Promptfoo in CI
Compare garak, PyRIT, and Promptfoo as LLM red teaming tools: what each scans, how each fits a CI gate, and which to run per commit vs nightly.
-
Choosing an LLM Guardrail: Llama Guard, NeMo, Guardrails AI
A decision guide for picking an LLM guardrail in 2026: Meta's Llama Guard 4, NVIDIA's NeMo Guardrails and Guardrails AI, and which shape fits your problem.
-
Rebuff vs Vigil vs LLM Guard: Prompt Injection Detectors
Rebuff is archived, LLM Guard was archived in July 2026 and Vigil is alpha. What each detector does, and what that leaves you for new production work.
-
LLM Guard: Input and Output Scanning for Production LLM Apps
LLM Guard was archived by Protect AI in July 2026. What its input and output scanners do, and what adopting a frozen runtime guardrail costs you now.
-
PyRIT: Microsoft's AI Red-Teaming Framework, Explained
A technical breakdown of PyRIT, Microsoft's red-teaming framework for generative AI: targets, datasets, converters, scorers, attacks and executors.
-
False Positive Cost in Refusal Systems: Measure and Tune
Practical methods for quantifying refusal false positives in LLM products: eval design, baseline rates, threshold tuning, and the regression suite.
-
NVIDIA Garak: LLM Vulnerability Scanner Guide
How NVIDIA garak probes LLMs at v0.17.0: the CLI, JSONL findings, CI gates, the multi-turn GOAT probe, and where its pre-deployment scope stops.
-
Classifier-on-Output: Catching Misbehavior Post-Generation
How production teams use post-generation classifiers to catch what input filters and refusal training miss, with the architectures and their real costs.
-
Llama Guard vs NeMo vs OpenAI Moderation: Tradeoffs
A comparison of Llama Guard, NeMo Guardrails, and the OpenAI Moderation API on policy fit, latency, cost, failure modes, and when to pick each one.