RedLens AI
RedLens AI runs automated adversarial attacks against production AI systems and connects findings to controls used in security audits.
What RedLens AI is
RedLens AI runs automated adversarial attacks against production AI systems and connects findings to controls used in security audits. Its Master Attack Schema v2.0 covers six attack categories and 22 methodologies, with findings scored by CVSS. Assessments produce PDFs containing a risk score, vulnerabilities, remediation steps, and mappings to frameworks including HIPAA, NIST AI RMF, OWASP GenAI Top 10, MITRE ATLAS, ISO/IEC 42001, FBI CJIS Security Policy, and AIUC-1; these mappings are evidence, not certification. Scheduled daily or weekly retests can monitor for drift, and critical findings can trigger logged email alerts. Scans can run in CI/CD through a Python CLI or GitHub Action, with severity build gates and SARIF output, while findings can stream to several SIEM destinations or an HMAC-signed webhook. Deployment options include hosted SaaS and Enterprise self-hosted Docker, plus an MSSP console. In the self-hosted package, customer data stays in the customer's Postgres, but attack generation and judging still use Anthropic's API with the customer's key.
Good
- Assessment PDFs include risks and remediation steps.
- Daily or weekly retests can detect drift.
- CI/CD scans support severity gates and SARIF output.
- Findings can stream to listed SIEM tools.
- Free plan includes hosted scans.
Watch out
- Self-hosted attack generation and judging call Anthropic's API.
- Framework mappings are evidence, not certification.
- Slack and Teams alert channels are unavailable.
Who it suits
It is aimed at healthcare, law enforcement, and regulated enterprise organizations deploying AI systems. Teams needing scheduled testing, CI/CD scans, or self-hosted deployment may find its listed features relevant.
Verdict
RedLens AI brings adversarial scanning, reporting, and workflow integrations together for production AI systems. Review the plan limits and the self-hosted API handling details, and treat framework mappings as evidence rather than certification.
Plans and prices
From RedLens AI's own pricing page, checked 7 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free | Free | 25 hosted scans/month · 5 scans/day · 1 AI asset under test · Claude Haiku 4.5 judge · Work email verification required · Free |
| Team | $199 a month | 300 hosted scans/month · Up to 25 scans/day · No cap on AI assets under test · Full-strength judge model · $199/mo |
| Developer | $799 a month | 1 AI agent or model under test · 1 monitored production workflow · Monthly automated scans · Single-methodology scheduled scans · $799/mo |
| Professional | $8,000 a month | Up to 25 monitored production workflows · 50,000 attack simulations/month · Weekly automated scans · No cap on AI assets under test · $8,000/mo |
| Enterprise | — | No platform cap on workflows, assets or simulations · Daily automated scans · Self-hosted on-premise Docker · Custom SLA available · $150k/yr+ |
The facts
Each one read from RedLens AI's own pages, with the date it was checked.
What it does
- AI agent tools
- Blast Radius Mapper accepts tool schemas in OpenAPI, Anthropic, or OpenAI formats.checked 7 Oct 2026
- Assessment report
- An assessment produces a PDF with a risk score, vulnerabilities, remediation steps, and mappings to named frameworks.checked 7 Oct 2026
- Attack coverage
- Its Master Attack Schema v2.0 has 6 attack categories and 22 methodologies, with findings scored by CVSS.checked 7 Oct 2026
- CI/CD integration
- A Python CLI and GitHub Action can run scans in pipelines, with severity build gates and SARIF output for GitHub code scanning.checked 7 Oct 2026
- Deployment
- The site describes hosted SaaS and Enterprise self-hosted on-premise Docker deployment, plus an MSSP console with per-client isolation.checked 7 Oct 2026
- Intended users
- The site describes the product for healthcare, law enforcement, and regulated enterprise organizations deploying AI systems.checked 7 Oct 2026
- Monitoring
- Scheduled daily or weekly retests can detect drift, while critical findings can trigger logged email alerts.checked 7 Oct 2026
- Notable limits
- Slack and Teams alert channels, a Splunkbase app, a PyPI CLI package, broader DLP, employee shadow-AI governance, model-file scanning, and content moderation are listed as not currently available.checked 7 Oct 2026
- On-premise data handling
- The self-hosted package stores prompts, results, findings, users, and reports in the customer's Postgres, but attack generation and judging still call Anthropic's API using the customer's key.checked 7 Oct 2026
- Purpose
- RedLens runs adversarial attacks against production AI and maps findings to controls used in security audits.checked 7 Oct 2026
- Security status
- RedLens says its SOC 2 Type II audit is scheduled to begin in Q2 2027, with certification targeted for Q4 2027; its Railway and Anthropic infrastructure providers are described as SOC 2 Type II certified.checked 7 Oct 2026
- SIEM integrations
- Findings can stream to Splunk, SentinelOne, Devo, or an HMAC-signed webhook.checked 7 Oct 2026
- Support and SLA
- An Enterprise SLA is available, and the Enterprise plan lists a custom SLA as available.checked 7 Oct 2026
Where it runs
- Framework mappings
- The site lists mappings to HIPAA, NIST AI RMF, OWASP GenAI Top 10, MITRE ATLAS, ISO/IEC 42001, FBI CJIS Security Policy, and AIUC-1, and says these mappings are evidence rather than certification.checked 7 Oct 2026
Alternatives to RedLens AI
- 1
OpenSecureAI Scanner
Free planOpen sourceWebAPILinuxmacOS8.1From $49 a month - 2
AgentSeal
Free planOpen sourceWebAPILinuxmacOS8.0From $19 a month - 3
Promptfoo
Free planOpen sourceWebAPILinuxmacOS7.8Free plan - 4
Giskard
Free planOpen sourceWebAPILinuxSelf-hosted7.6Free plan - 5
Confident AI
Free planWebAPISelf-hosted6.9From $200 a month - 6
NVADER
Free planWeb6.7From $49 a month