Alternatives to Promptfoo

Runtime security layer that inspects what goes into your AI agents and controls what comes out

Braintrust delivers agent observability with evals, pattern discovery, and trace-scale storage in one platform.

LangSmith agent observability: trace, monitor, and evaluate every LLM run with SmithDB-backed trace search.

Securiti unifies DSPM, data privacy automation, and AI security on one DataAI Command Graph.

Invariant Guardrails enforces contextual security policies on AI agent tool calls and MCP server connections before they run.

Agentic AI security and MCP discovery that maps what AI agents can actually reach — from prompt to API to data.

AI agent security and governance that watches the decision point where context and intent collide

Unbound is an Agent Access Security Broker that governs what AI coding agents can run, reach, and touch.

Trusera's ai-bom discovers, catalogs, and governs every AI agent, model, and pipeline running across your enterprise infrastructure.

Adrian is open-source runtime security that reads an AI agent's chain of thought and blocks malicious plans before they execute.

Mindgard is AI red teaming that reconnoiters, exploits, and retests vulnerabilities in production AI agents and models.

Real-time guardrails, evals and red teaming for text-based LLM agents, running on small language model judges.

Enterprise AI security platform that discovers agents and MCP servers, red-teams them, and enforces policy inline at the gateway.

Open-source red-team toolkit for AI agent prompt injection, jailbreak and goal hijacking testing

A free, vendor-neutral top 10 of agentic AI security risks, with a mitigation strategy attached to each threat.

Vorlon enforces AI agent runtime security — blocking policy-violating agent actions, masking sensitive data in transit, and restricting write access at the

OpenAI's closed early-access program for safety testing of its o-series reasoning models

AI red teaming and custom guardrails that hold your models, apps, and agents to your own written policy

BotCity governs the Python scripts and AI agents running on your endpoints and in your pipelines

Open-source OS-level runtime security that keeps real API keys and PII out of compromised OpenClaw and Hermes Agent processes.

Tessl is an agent enablement platform for versioning, scanning, evaluating and governing coding agent skills.

Norm Ai encodes legal rules into verifiable AI agents for compliance review, DDQs, and RFPs at regulated institutions.

ElevenAgents Guardrails adds real-time safety checks to voice agents — prompt-injection blocking, reply screening, and custom policy

Self-hosted AI agent governance with an access map, Cedar policy gates and a signed audit ledger for Claude Code, Codex and Gemini CLI

agentsh enforces syscall-level policy for AI coding agents — file, network, and process control that holds no matter the prompt.

Traccia traces, costs, evaluates and enforces policy on AI agents — an AI agent control plane you point at agents you already run.

ECC is the open-source agent harness operating layer that gives Claude Code, Codex, Cursor and Kimi shared skills, memory, planning and

AgentSeal red-teams AI agents and audits MCP servers with 380+ adversarial attack probes from one CLI.

Exogram is a permanent AI memory vault that gives ChatGPT, Claude and Gemini one shared, encrypted context graph.

Arcade AI is the MCP authorization runtime that governs every action your AI agents take.