Red teaming and evaluation · #1 by signal score
Promptfoo
Open-source red teaming, static scanning, and evaluation for LLM applications and agents, with plugins for tool misuse, MCP, memory poisoning, and prompt injection. OpenAI agreed to acquire it in March 2026 and committed to keep it open source.
Acquired by OpenAI, announced 2026-03-09, not yet closed.
31Signal score / 100
- Capital
- 6/35
- Product
- 15/25
- Standards
- 0/20(not yet assessed)
- Momentum
- 10/20
Identity primitives
| Agent as a first-class identity | Not checked |
| On-behalf-of token exchange | Not checked |
| Cross App Access (ID-JAG) | Not checked |
| Asynchronous human approval (CIBA) | Not checked |
| MCP authorization conformance | Not checked |
| Fine-grained authorization | Not checked |
| Short-lived, secretless credentials | Not checked |
| Token vault | Not checked |
| Kill switch | No public claim found |
| Per-action audit chain | No public claim found |
Threats it says it addresses
- ASI01 Agent Goal Hijack
- ASI02 Tool Misuse and Exploitation
- ASI03 Identity and Privilege Abuse
- ASI04 Agentic Supply Chain Vulnerabilities
- ASI05 Unexpected Code Execution
- ASI06 Memory and Context Poisoning
- ASI07 Insecure Inter-Agent Communication
- ASI08 Cascading Failures
- ASI09 Human-Agent Trust Exploitation
- ASI10 Rogue Agents
- LLM01 Prompt Injection
- LLM02 Sensitive Information Disclosure
- LLM03 Supply Chain
- LLM04 Data and Model Poisoning
- LLM05 Improper Output Handling
- LLM06 Excessive Agency
- LLM07 System Prompt Leakage
- LLM08 Vector and Embedding Weaknesses
- LLM09 Misinformation
- LLM10 Unbounded Consumption
Company
HQ: US
Founded: 2024
Funding: $23M disclosed, latest Series A
Product: Promptfoo
Open source
25,404 stars · 350 contributors
Last push 2026-09-24
Sources
- Promptfoo red teaming documentation (vendor, accessed 2026-09-24)
- Promptfoo: OWASP Top 10 for Agentic Applications (vendor, accessed 2026-09-24)
- Promptfoo: OWASP LLM Top 10 (vendor, accessed 2026-09-24)
- Promptfoo raises $18.4 million Series A to build definitive AI security stack (press-release, accessed 2026-09-24)
- OpenAI acquires Promptfoo to secure its AI agents (trade-press, accessed 2026-09-24)
- Promptfoo is joining OpenAI (press-release, accessed 2026-09-24)
Last verified 2026-09-24.