Promptfoo

Open-source CLI for testing and securing language model applications

Vendor
Promptfoo, Inc.
Also known as
promptfoo

Available worldwide · Popular in: US

What is Promptfoo?

Automated testing and security evaluation framework for AI applications, with support for comparing multiple model providers and identifying potential vulnerabilities through red teaming and assertion-based validation.

Independently observed

Promptfoo pricing

Plans, per-tier features and add-ons, dated and linked to live pricing. Pricing changes often; always verify at source before you rely on it.

Pricing as of verify at live pricing ↗Independently observed
HybridFree tier

Free open-source Community tier; Enterprise and On-Premise plans with custom pricing

Community

Free
Free

Open-source version for individual developers and small teams

red_teaming_probes
10k/mo
  • All LLM evaluation features
  • All model providers and integrations
  • Red teaming (10k probes/month)
  • Custom integration with your own app
  • Run locally or self-host on your own infrastructure
  • Vulnerability scanning
  • Community support

Enterprise

Contact sales
Contact sales

Managed cloud platform with team collaboration, continuous monitoring, and compliance features

  • All Community features
  • Custom red teaming limits
  • Team sharing & collaboration
  • Continuous monitoring
  • Centralized security/compliance dashboard
  • Customizable attack profiles and target settings
  • SSO and granular permission profiles
  • Promptfoo API access
  • Managed cloud deployment
  • Professional services support
  • Priority support & SLA guarantees

On-Premise

Contact sales
Contact sales

Custom deployment for organizations requiring full control over infrastructure

  • Complete data isolation
  • On-premise deployment

What Promptfoo does

The capabilities that matter for prompt management, normalised so it lines up with every alternative. “-” means we haven't confirmed it, not that it's missing.

Capabilities
Versioning model
UI hosted registry
Diff and rollback
-
Deploy without redeploy
-
Non engineer editing
✗
Multi model playground
✓
Ab testing
-
LLM judge or human eval
✓
Multi step flows
-
Approval workflow
-
Tracing included
-
Self hostable
✓
Deployment model
Self hosted
Pricing model
Open source self host
Independently observed

Platform & deployment

Independently observed
Platforms
  • CLI
Deployment
  • Self-hosted

Integrations (15)

Independently observed
llm
  • Azure•
  • Bedrock•
  • Ollama•
  • OpenAI
  • Anthropic
  • Google (Gemini)
  • DeepSeek
  • MCP (Model Context Protocol)
  • CI/CD pipelines
  • Webhooks
  • Agent frameworks
  • CI/CD platforms
  • GitHub
  • Python providers
  • Gemini

Promptfoo FAQ

Common questions about Promptfoo, answered from independent, dated evidence.

What is Promptfoo?

A CLI and library for testing, evaluating, and red-teaming LLM applications and agents. Automatically identifies vulnerabilities through security scanning and provides remediation guidance. It is indexed under Prompt Management.

Source: https://www.promptfoo.dev/pricing/

How much does Promptfoo cost?

Promptfoo does not publish its prices. Pricing is quoted on request, across 3 plans (Community, Enterprise and On-Premise), so the figure depends on your seat count and requirements. We record this as a pricing-transparency signal rather than guessing a number. Pricing changes often, so verify at source before relying on it.

Source: https://www.promptfoo.dev/pricing/

What platforms does Promptfoo support?

Promptfoo supports the web and a command-line interface. Platforms we have not confirmed are simply not listed here rather than ruled out.

Source: https://www.promptfoo.dev/pricing/

Can Promptfoo be self-hosted?

Yes. Promptfoo can be deployed cloud / SaaS, on-premise and self-hosted, so it does not have to run on the vendor's infrastructure.

Source: https://www.promptfoo.dev/pricing/

What does Promptfoo integrate with?

We have confirmed 14 integrations for Promptfoo, including OpenAI, Anthropic, Google (Gemini), DeepSeek, MCP (Model Context Protocol), CI/CD pipelines, Webhooks and Agent frameworks, plus 6 more. This is what we could verify from public sources, so the vendor may support others we have not indexed.

Source: https://www.promptfoo.dev/pricing/

What security certifications does Promptfoo have?

We have independently confirmed SOC 2 and ISO 27001 for Promptfoo. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as Promptfoo not holding them. Always confirm compliance directly before you rely on it.

Source: https://www.promptfoo.dev/blog/SOC2-compliance/

Where is Promptfoo available?

Promptfoo is available worldwide. Its primary market is the United States. The vendor is headquartered in the United States.

Source: https://www.promptfoo.dev/pricing/

Promptfoo alternatives

Other prompt management we track, ranked by the same independent score.

All Promptfoo alternatives, ranked →

Compare Promptfoo

Side by side against other prompt management, attribute by attribute, with a source on every value.

Independent · unbought · dated

The vioscaleAI score: one lens on the evidence

Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for Promptfoo, not the verdict.

Balanced composite 58 / 100
low · 22%
Signal contributions to the composite score
SignalScoreWeightContributionEvidence
Capabilities1000.088.0✓
Security posture650.127.9✓
Integrations270.051.5✓
Stars00.050.0-
Dependent projects00.050.0-
Development activity00.140.0-
Release cadence00.080.0-
Package downloads00.040.0-
Security score00.050.0-
Developer Q&A activity00.140.0-

Computed . Re-weight it by intent, or see the full method.

All data & sourcesshow ↓

Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.

Content

AttributeValueEvidence
Faq7 itemsmediumsource · 2026-09-10 · 64%

Features

AttributeValueEvidence
CapabilitiesSoc2 type ii: Yes · Pricing model: open-source-self-host · Self hostable: Yes · Deployment model: self-hosted · Versioning model: UI-hosted registry · Architecture model: open_source_climediumsource · 2026-10-02 · 60%

Integrations

AttributeValueEvidence
Count8mediumsource · 2026-10-02 · 60%

Market

AttributeValueEvidence
AvailabilityHqCountry: US · PrimaryMarkets: … · AvailabilityScope: global · AvailableCountries: … · NotAvailableCountries: …highsource · 2026-08-21 · 75%

Pricing

AttributeValueEvidence
Free tierYesmediumsource · 2026-10-02 · 60%
Price levelfreemediumsource · 2026-10-02 · 60%
TransparentYesmediumsource · 2026-09-06 · 60%
Modelopen_sourcemediumsource · 2026-10-02 · 60%

Security

AttributeValueEvidence
Iso27001Yeshighsource · 2026-08-21 · 75%
Soc2Yeshighsource · 2026-08-21 · 75%
Trust centerhttps://www.promptfoo.dev/blog/tags/security-vulnerability/mediumsource · 2026-10-02 · 60%
Still deciding?

Is Promptfoo the right choice for you?

Tell us the job, the constraints and what you weigh most, and we will rank Promptfoo against the rest of the prompt management we index, using the same dated evidence weighted your way.

Free to run, no account needed to start. How the evaluation works

For the makers of Promptfoo

Is this your product?

This profile was built from public sources without asking you. You can take the badge below and use it anywhere, and you can claim the profile to correct anything we got wrong. Both are free, and neither moves Promptfoo up or down: nobody can buy rank here, including you.

Take the badge

Live, always current, and free to use on your own site. It shows Promptfoo's independent score and links back to this profile.

Promptfoo, verified on vioscaleAI
HTML
<a href="https://www.vioscale.ai/software/promptfoo" target="_blank" rel="noopener">
  <img src="https://www.vioscale.ai/badge/software/promptfoo.svg" alt="Promptfoo, verified on vioscaleAI" width="330" height="76" loading="lazy" />
</a>
Markdown, for a README →
Markdown
[![Promptfoo, verified on vioscaleAI](https://www.vioscale.ai/badge/software/promptfoo.svg)](https://www.vioscale.ai/software/promptfoo)

Claim the profile

Verify you control the domain, then point us at the pages that state the facts about Promptfoo and add your own description and media. Free, and it does not change the score.

  • Correct anything wrong, with evidence
  • Point our crawler at the pages that matter
  • Write your own description and add media
Claim Promptfoo

Not the owner? How vendor profiles work