PromptRedTeam
PromptRedTeam is a tool for scanning user input for attacks before it reaches a large language model (LLM).
What PromptRedTeam is
PromptRedTeam is a tool for scanning user input for attacks before it reaches a large language model (LLM). It detects direct injection, role manipulation, zero-width injection, delimiter injection, and encoded payloads. Its checks include pattern matching for override keywords, instruction conflicts, and prompt structure, as well as recognition of jailbreak patterns, role-play scenarios, and bypass attempts. It can detect zero-width characters, normalize Unicode, inspect Base64 and other encodings, and decode suspicious text before scanning again. Delimiter checks look for context-breaking markers, Markdown abuse, and structural manipulation. Applications can use its hosted API, which the homepage illustrates with a POST request to https://api.promptredteam.com/test, or self-host the project. The live demo accepts up to 1,000 characters and allows 10 requests per minute; self-hosting provides unlimited usage. Python, JavaScript, and cURL examples are available. The suggested workflow is to scan inputs before they reach an LLM, then block threats or log them for review. PromptRedTeam is open source under the MIT License, with web, API, and self-hosted options.
Good
- Detects direct injection and role manipulation.
- Checks zero-width, delimiter, and encoded payloads.
- Offers web, API, and self-hosted deployment.
- Open source under the MIT License.
- Includes Python, JavaScript, and cURL examples.
Watch out
- Hosted demo is limited to 10 requests per minute.
- Live tester accepts up to 1,000 characters.
Who it suits
It suits developers who want to screen inputs before sending them to an LLM and block or log detected threats. Self-hosting is an option for those who need unlimited usage.
Verdict
PromptRedTeam focuses on screening text for several kinds of prompt attacks before it reaches an LLM. Its hosted demo has request and input limits, while self-hosting is listed as providing unlimited usage.
Plans and prices
From PromptRedTeam's own pricing page, checked 9 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Open source | Free | Hosted demo: 10 requests/min · Self-hosted: unlimited usage |
The facts
Each one read from PromptRedTeam's own pages, with the date it was checked.
What it does
- Attack coverage
- It detects direct injection, role manipulation, zero-width injection, delimiter injection, and encoded payloads.checked 8 Oct 2026
- Delimiter detection
- The site says it detects context-breaking delimiters, markdown abuse, and structural manipulation.checked 8 Oct 2026
- Detection categories
- It detects direct injection, role manipulation, zero-width injection, delimiter injection, and encoded payloads.checked 9 Oct 2026
- Direct injection detection
- The site says direct injection detection uses pattern matching for override keywords, instruction conflicts, and prompt structure analysis.checked 8 Oct 2026
- Hidden and encoded text
- The site describes zero-width character detection, Unicode normalization, Base64 and encoding analysis, and automatic decoding and rescanning.checked 8 Oct 2026
- Hosted API
- The site demonstrates sending text to https://api.promptredteam.com/test using a POST request with JSON.checked 9 Oct 2026
- Integration examples
- The site provides implementation examples for Python, JavaScript, and cURL.checked 9 Oct 2026
- License
- The homepage describes PromptRedTeam as open source under the MIT License.checked 8 Oct 2026
- Live testing limit
- The live demo allows 10 requests per minute and accepts up to 1,000 characters in its input field.checked 9 Oct 2026
- Open source license
- The site describes the project as open source under the MIT License.checked 9 Oct 2026
- Purpose
- PromptRedTeam scans user inputs for prompt injection before they reach an LLM.checked 9 Oct 2026
- Rate limit
- The live tester allows 10 requests per minute and says deploying your own provides unlimited usage.checked 8 Oct 2026
- Role manipulation detection
- The site says role manipulation detection recognizes known jailbreak patterns, role-play scenarios, and bypass attempts.checked 8 Oct 2026
- Self-hosting
- The site says users can self-host for unlimited usage.checked 9 Oct 2026
- Suggested use
- The homepage suggests scanning inputs before they reach an LLM, then blocking threats or logging them for review.checked 8 Oct 2026
- Workflow
- The site says applications can scan inputs before they reach an LLM and block threats or log them for review.checked 9 Oct 2026
The company
- Company details
- The opened maker page does not state the maker's name, headquarters, or founding year.checked 9 Oct 2026
Alternatives to PromptRedTeam
- 1
OpenSecureAI Scanner
Free planOpen sourceWebAPILinuxmacOS8.1From $49 a month - 2

AgentSeal
Free planOpen sourceWebAPILinuxmacOS8.0From $19 a month - 3

Promptfoo
Free planOpen sourceWebAPILinuxmacOS7.8Free plan - 4

Giskard
Free planOpen sourceWebAPILinuxSelf-hosted7.6Free plan - 5

Confident AI
Free planWebAPISelf-hosted6.9From $200 a month - 6
NVADER
Free planWeb6.7From $49 a month
