Documentation reviewed
Promptfoo
Checked
Recheck due
Promptfoo evaluates configured prompts/applications and generates red-team cases. Its local scanner can target HTTP, browser or model interfaces; managed team features are a separate offering.
- Availability
- Available. Public Community CLI/library; enterprise deployment and API features have different entitlements.
- How to use it
- Library / CLI; Web app. Current quickstart requires Node.js 22.22.0 or later; CLI and browser-based configuration UI.
- Processing and data
- On-device option; Self-hosted option; Vendor cloud; Local and cloud options. The scanner runs locally, but attack generation defaults to a remote provider and configured targets may also be remote. Review prompts, reports and credentials before sharing.
- Costs and limits
- Community software; model/target costs; paid enterprise options
- Outputs
- Evaluation results and red-team reports for configured tests; results depend on coverage, assertions, models and the target configuration.
Attack generation and target execution are separate model calls and can incur charges. Community probe limits apply. Run only against authorized targets; no scan result is a blanket security certification.