# Best AI Red Teaming Companies > A sourced, unranked comparison of 23 AI red teaming vendors and the main open-source tools: managed service vs automated platform, ownership, what each tests, framework mappings, public pricing and free tiers. Last full fact check: 2026-11-07. Vendors are listed alphabetically within offering type; nothing is ranked, rated or scored. Every fact is a vendor claim or a dated press/regulator statement and is linked to its source on the vendor page. Author: AUTHOR_NAME, Software quality engineer with 20 years of experience testing software before customers do. ## Comparison - [Best AI Red Teaming Companies (2026)](https://bestairedteaming.com/): the comparison table (managed service vs automated platform vs both; ownership; what each tests; framework mappings; public pricing; free tier) and a card per vendor. - [Methodology](https://bestairedteaming.com/methodology): selection rules, exclusions (Scale AI, Haize Labs), sources, known uncertainties, update policy. - [Disclosure](https://bestairedteaming.com/disclosure): referral links and the match form; what money does not buy. - [Get matched](https://bestairedteaming.com/get-matched): lead form for a two-to-three-vendor short list. - [About](https://bestairedteaming.com/about): author. ## Guides - [What is AI red teaming?](https://bestairedteaming.com/what-is-ai-red-teaming): NIST definition, scope (NIST MS-2.7-007, OWASP LLM Top 10 2025), model vs application, humans vs automation, what it is not. - [AI red teaming vs penetration testing](https://bestairedteaming.com/ai-red-teaming-vs-penetration-testing): pen test = technical exploitability; red team = manipulation into unsafe behaviour (Bishop Fox); which vendors sell which. - [How much does AI red teaming cost?](https://bestairedteaming.com/ai-red-teaming-cost): published prices only (Enkrypt AI $0/$149/$1,499 per month; Promptfoo free up to 10k probes/month; SPLX and Giskard free tiers); everything else is quote-based. - [Open-source AI red teaming tools](https://bestairedteaming.com/open-source-ai-red-teaming-tools): promptfoo, garak, PyRIT, DeepTeam, Inspect, Giskard OSS, Agentic Radar, Whistleblower; includes LLM evaluation tools vs red-teaming tools. - [EU AI Act and AI red teaming](https://bestairedteaming.com/eu-ai-act-red-teaming): Article 55 adversarial testing duty for GPAI models with systemic risk (since 2025-08-02), Digital Omnibus deadlines, OWASP, MITRE ATLAS 2026.10, NIST AI 600-1, US status. - [FAQ](https://bestairedteaming.com/faq): 15 buyer questions answered from public sources. ## Vendors (23, alphabetical) - [Adversa AI](https://bestairedteaming.com/vendors/adversa-ai): Both (platform + service); Independent (VC-backed); mappings: OWASP LLM Top 10; pricing not public; free tier no. - [Bishop Fox](https://bestairedteaming.com/vendors/bishop-fox): Managed service; Not stated; mappings: OWASP LLM Top 10, OWASP ML Top 10, OWASP Agentic Top 10, MITRE ATLAS; pricing not public; free tier no. - [Bugcrowd](https://bestairedteaming.com/vendors/bugcrowd): Managed service; Not stated; mappings: OWASP LLM Top 10, MITRE ATLAS, EU AI Act; pricing not public; free tier no. - [Cisco AI Defense](https://bestairedteaming.com/vendors/cisco-ai-defense): Automated platform; Robust Intelligence acquired by Cisco; mappings: OWASP LLM Top 10, OWASP Agentic Top 10, MITRE ATLAS, NIST AI RMF, EU AI Act; pricing not public; free tier no. - [Enkrypt AI](https://bestairedteaming.com/vendors/enkrypt-ai): Automated platform; Acquired by Anaconda; mappings: NIST AI RMF, EU AI Act; pricing public; free tier yes. - [F5 AI Red Team](https://bestairedteaming.com/vendors/f5-ai-red-team): Automated platform; CalypsoAI acquired by F5; mappings: OWASP LLM Top 10; pricing not public; free tier no. - [Giskard](https://bestairedteaming.com/vendors/giskard): Automated platform; Independent; mappings: OWASP LLM Top 10; pricing not public; free tier yes. - [Gray Swan](https://bestairedteaming.com/vendors/gray-swan): Both (platform + service); Independent; mappings: none named; pricing not public; free tier no. - [HackerOne](https://bestairedteaming.com/vendors/hackerone): Managed service; Not stated; mappings: OWASP LLM Top 10, OWASP Agentic Top 10, MITRE ATLAS, NIST AI RMF, EU AI Act; pricing not public; free tier no. - [HiddenLayer](https://bestairedteaming.com/vendors/hiddenlayer): Automated platform; Independent; mappings: none named; pricing not public; free tier no. - [Holistic AI](https://bestairedteaming.com/vendors/holistic-ai): Automated platform; Independent; mappings: NIST AI RMF, EU AI Act, ISO 42001, NYC Local Law 144; pricing not public; free tier no. - [Lakera](https://bestairedteaming.com/vendors/lakera): Both (platform + service); Acquired by Check Point; mappings: none named; pricing not public; free tier unclear. - [Lasso Security](https://bestairedteaming.com/vendors/lasso-security): Automated platform; Independent; mappings: OWASP LLM Top 10, NIST AI RMF, MITRE (ATLAS not named); pricing not public; free tier unclear. - [Mindgard](https://bestairedteaming.com/vendors/mindgard): Both (platform + service); Independent; mappings: OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, EU AI Act, ISO 42001; pricing not public; free tier no. - [NCC Group](https://bestairedteaming.com/vendors/ncc-group): Managed service; Not stated; mappings: OWASP LLM Top 10, NIST AI RMF, EU AI Act, ISO 42001; pricing not public; free tier no. - [Noma Security](https://bestairedteaming.com/vendors/noma-security): Automated platform; Independent (VC-backed); mappings: OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, EU AI Act, ISO 42001; pricing not public; free tier no. - [Pillar Security](https://bestairedteaming.com/vendors/pillar-security): Automated platform; Independent; mappings: OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, EU AI Act; pricing not public; free tier no. - [Prisma AIRS (Palo Alto)](https://bestairedteaming.com/vendors/palo-alto-networks-prisma-airs): Automated platform; Protect AI acquired by Palo Alto Networks; mappings: OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF; pricing not public; free tier no. - [Promptfoo](https://bestairedteaming.com/vendors/promptfoo): Automated platform; Part of OpenAI; mappings: OWASP LLM Top 10, NIST AI RMF, EU AI Act; pricing public; free tier yes. - [Repello AI](https://bestairedteaming.com/vendors/repello-ai): Automated platform; Independent; mappings: OWASP LLM Top 10, NIST AI RMF, MITRE (ATLAS not named); pricing not public; free tier unclear. - [SPLX](https://bestairedteaming.com/vendors/splx): Automated platform; Acquired by Zscaler; mappings: none named; pricing not public; free tier yes. - [Straiker](https://bestairedteaming.com/vendors/straiker): Automated platform; Not stated (appears independent); mappings: OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, EU AI Act; pricing not public; free tier unclear. - [Trail of Bits](https://bestairedteaming.com/vendors/trail-of-bits): Managed service; Not stated; mappings: none named; pricing not public; free tier no. ## Open-source tools - promptfoo (Promptfoo (now part of OpenAI); MIT): https://github.com/promptfoo/promptfoo - garak (NVIDIA (copyright Leon Derczynski; contact garak@nvidia.com); Apache-2.0): https://github.com/NVIDIA/garak - PyRIT (Microsoft (built by the Microsoft AI Red Team); MIT): https://github.com/microsoft/PyRIT - DeepTeam (Confident AI (built on DeepEval); Apache-2.0): https://github.com/confident-ai/deepteam - Inspect (UK AI Security Institute; MIT): https://github.com/UKGovernmentBEIS/inspect_ai - Giskard OSS (Giskard; Apache-2.0): https://github.com/Giskard-AI/giskard - Agentic Radar (SPLX / Zscaler; Not verified): https://splx.ai/ - Whistleblower (Repello AI; Not verified): https://repello.ai/ ## Full fact blocks - [llms-full.txt](https://bestairedteaming.com/llms-full.txt): every vendor's complete fact block, positioning, ownership history and sources in plain text. ## Optional - [Sitemap](https://bestairedteaming.com/sitemap-index.xml)