Giskard

Active
GitHub Python Apache-2.0

Description

An open-source evaluation and testing library for LLM agents providing automated model scanning, bias detection, performance benchmarking, and compliance checks.

Key Features

  • Scenario API for creating evaluations that test non-deterministic LLM outputs
  • Built-in checks including Groundedness, Conformity, and LLM-as-judge assessments
  • Red-teaming vulnerability scanner generating adversarial test suites across OWASP LLM Top-10 categories
  • Multi-turn conversation testing for full agent dialog evaluation
  • Modular v3 architecture with focused packages: giskard-checks, giskard-scan, and planned giskard-rag
  • Async-first design with lightweight dependencies for efficient CI/CD integration

Use Cases

💡 Catch regressions after model or prompt changes with automated eval suites
💡 Validate RAG quality by checking if answers are grounded in retrieved context
💡 Red-team AI agents to identify prompt injection, data leakage, and bias vulnerabilities
💡 Generate evaluation datasets for RAG applications from knowledge bases
💡 Enforce content safety policies with conformity checks on agent outputs

Strengths & Limitations

Strengths

  • Actively maintained, recent updates
  • High community interest (5.8k stars)
  • Permissive open-source license (Apache-2.0)
  • Established track record (4 years in production)

Quick Start

pip install giskard-checks && pip install giskard-scan

Related Projects

Purple Llama

4.4k · Python
Active A

Meta's set of tools to assess and improve LLM security, including safety benchmarks, prompt injection detection, and output auditing to help evaluate and enhance the safety of large language models.

securityevaluationpython +2
  • · Llama Guard models for input/output content moderation and safety filtering
  • · Prompt Guard to detect and block prompt injection and jailbreak attacks
  • · Code Shield for inference-time filtering of insecure LLM-generated code

Agent Governance Toolkit

6.2k · Python
Active A

Microsoft's AI Agent Governance Toolkit providing policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

securityevaluationpython +2
  • · Deterministic policy enforcement engine: intercepts and evaluates all operations before model output reaches tool calls, with YAML policy files defining allow/deny/approval-required rules — denied actions are structurally impossible
  • · Zero-trust identity and audit trail: assigns unique DIDs to each agent, generates tamper-evident audit records for every operation including active policy, request content, and decision rationale
  • · Multi-language SDK support: Python, TypeScript, .NET, Rust, and Go SDKs with unified policy evaluation APIs covering major development stacks

Promptfoo

24.8k · TypeScript
Active A

Test and evaluate LLM prompts, agents, and RAG pipelines. Built-in red teaming and security evaluation for reliable AI applications.

testingevaluationred-teaming +2
  • · Automated LLM evaluations — Batch test prompts, models, and RAG pipeline output quality
  • · Red team security testing — Built-in vulnerability scanning and adversarial testing for LLM security
  • · Multi-model comparison — Side-by-side comparison of OpenAI, Anthropic, Azure, Bedrock, Ollama models

LLM Guard

3.2k · Python
Normal A

The security toolkit for LLM interactions, providing prompt injection detection, PII anonymization, content safety auditing, and more to secure production LLM deployments.

securityllmpython +2
  • · Comprehensive prompt scanners: prompt injection, toxicity, secrets, sentiment, and more
  • · Output scanners: bias detection, factual consistency, malicious URL detection, and sensitive data filtering
  • · PII anonymization and deanonymization for data leakage prevention

Related Articles