EVERYTHING XIAOMI
Get listed

PromptRedTeam

PromptRedTeam is a tool for scanning user input for attacks before it reaches a large language model (LLM).

Place
#12 of 27
Score
6.2
PromptRedTeam's website

What PromptRedTeam is

PromptRedTeam is a tool for scanning user input for attacks before it reaches a large language model (LLM). It detects direct injection, role manipulation, zero-width injection, delimiter injection, and encoded payloads. Its checks include pattern matching for override keywords, instruction conflicts, and prompt structure, as well as recognition of jailbreak patterns, role-play scenarios, and bypass attempts. It can detect zero-width characters, normalize Unicode, inspect Base64 and other encodings, and decode suspicious text before scanning again. Delimiter checks look for context-breaking markers, Markdown abuse, and structural manipulation. Applications can use its hosted API, which the homepage illustrates with a POST request to https://api.promptredteam.com/test, or self-host the project. The live demo accepts up to 1,000 characters and allows 10 requests per minute; self-hosting provides unlimited usage. Python, JavaScript, and cURL examples are available. The suggested workflow is to scan inputs before they reach an LLM, then block threats or log them for review. PromptRedTeam is open source under the MIT License, with web, API, and self-hosted options.

Good

  • Detects direct injection and role manipulation.
  • Checks zero-width, delimiter, and encoded payloads.
  • Offers web, API, and self-hosted deployment.
  • Open source under the MIT License.
  • Includes Python, JavaScript, and cURL examples.

Watch out

  • Hosted demo is limited to 10 requests per minute.
  • Live tester accepts up to 1,000 characters.

Who it suits

It suits developers who want to screen inputs before sending them to an LLM and block or log detected threats. Self-hosting is an option for those who need unlimited usage.

Verdict

PromptRedTeam focuses on screening text for several kinds of prompt attacks before it reaches an LLM. Its hosted demo has request and input limits, while self-hosting is listed as providing unlimited usage.

Plans and prices

From PromptRedTeam's own pricing page, checked 9 Oct 2026.

All about pricing
PlanPriceWhat it gives you
Open sourceFreeHosted demo: 10 requests/min · Self-hosted: unlimited usage

The facts

Each one read from PromptRedTeam's own pages, with the date it was checked.

What it does

Attack coverage
It detects direct injection, role manipulation, zero-width injection, delimiter injection, and encoded payloads.checked 8 Oct 2026
Delimiter detection
The site says it detects context-breaking delimiters, markdown abuse, and structural manipulation.checked 8 Oct 2026
Detection categories
It detects direct injection, role manipulation, zero-width injection, delimiter injection, and encoded payloads.checked 9 Oct 2026
Direct injection detection
The site says direct injection detection uses pattern matching for override keywords, instruction conflicts, and prompt structure analysis.checked 8 Oct 2026
Hidden and encoded text
The site describes zero-width character detection, Unicode normalization, Base64 and encoding analysis, and automatic decoding and rescanning.checked 8 Oct 2026
Hosted API
The site demonstrates sending text to https://api.promptredteam.com/test using a POST request with JSON.checked 9 Oct 2026
Integration examples
The site provides implementation examples for Python, JavaScript, and cURL.checked 9 Oct 2026
License
The homepage describes PromptRedTeam as open source under the MIT License.checked 8 Oct 2026
Live testing limit
The live demo allows 10 requests per minute and accepts up to 1,000 characters in its input field.checked 9 Oct 2026
Open source license
The site describes the project as open source under the MIT License.checked 9 Oct 2026
Purpose
PromptRedTeam scans user inputs for prompt injection before they reach an LLM.checked 9 Oct 2026
Rate limit
The live tester allows 10 requests per minute and says deploying your own provides unlimited usage.checked 8 Oct 2026
Role manipulation detection
The site says role manipulation detection recognizes known jailbreak patterns, role-play scenarios, and bypass attempts.checked 8 Oct 2026
Self-hosting
The site says users can self-host for unlimited usage.checked 9 Oct 2026
Suggested use
The homepage suggests scanning inputs before they reach an LLM, then blocking threats or logging them for review.checked 8 Oct 2026
Workflow
The site says applications can scan inputs before they reach an LLM and block threats or log them for review.checked 9 Oct 2026

The company

Company details
The opened maker page does not state the maker's name, headquarters, or founding year.checked 9 Oct 2026

Alternatives to PromptRedTeam

All alternatives
  1. 1

    OpenSecureAI Scanner

    Free planOpen sourceWebAPILinuxmacOS
    8.1From $49 a month
  2. 2AgentSeal logo

    AgentSeal

    Free planOpen sourceWebAPILinuxmacOS
    8.0From $19 a month
  3. 3Promptfoo logo

    Promptfoo

    Free planOpen sourceWebAPILinuxmacOS
    7.8Free plan
  4. 4Giskard logo

    Giskard

    Free planOpen sourceWebAPILinuxSelf-hosted
    7.6Free plan
  5. 5Confident AI logo

    Confident AI

    Free planWebAPISelf-hosted
    6.9From $200 a month
  6. 6

    NVADER

    Free planWeb
    6.7From $49 a month