Red teaming companies, products & suppliers
Offensive testing of AI systems by a team or platform, producing an engagement report. Jobs: engagements against llm apps; scenario libraries; reported findings.
What is Red teaming?
Offensive testing of AI systems by a team or platform, producing an engagement report. Jobs: engagements against llm apps; scenario libraries; reported findings.
What problems does it solve?
Nobody has tried to make the system fail the way an adversary would.
Typical business use cases
- Engagements against LLM apps
- Scenario libraries
- Reported findings
Important capabilities
- Scenarios
- Operators
- Reports
What buyers should evaluate
- Independence
- Rules of engagement
- Retest
Risks and governance considerations
A vendor red-teaming its own production with no independent report.
Procurement checklist
- Independence
- RoE
- Retest evidence
Relevant AI Trustmark assurance
AI Trustmark independent findings appear only when an assessment or certificate exists. Category membership does not imply verification.
Products and providers
Open a product profile for its catalogue details, or use the provider link for the company profile. Claimed listings appear first, then by name. Payment never changes the order.
By Adversa AI
Ship AI without shipping risk. Adversa AI provides a runtime control layer that stops dangerous coding agent actions before they become the incident. Adversa AI Red Teaming Platfor
Center for AI Safety. Reducing societal-scale risks from AI by advancing safety research, building the field of AI safety researchers, and promoting safety standards. HarmBench is
By Confident AI
Confident AI is the AI quality platform for enterprise teams to standardize AI evals and observability across the org — one consistent bar for how every team measures and monitors
By F5
Unified delivery & security for applications, APIs, & AI workloads across any infrastructure, trusted by 85% of the Fortune 500. Secure your digital ecosystem. F5 AI Red Team is F5
By Giskard
Secure AI agents with Giskard’s continuous AI red teaming. Detect vulnerabilities, improve LLM security, and safeguard your AI systems. Giskard LLM Red Teaming is Giskard's softwar
By HiddenLayer
Secure your AI with HiddenLayer’s end-to-end platform that detects threats, protects models, and ensures safe, compliant AI adoption at scale. HiddenLayer Automated Red Team is Hid
By Meta
Meta Platforms sells family-of-apps advertising products and open Llama models. Public AI pages cover research models, Llama releases and developer tooling. CyberSecEval is Meta's
By Microsoft
PyRIT, the Python Risk Identification Tool for generative AI, is Microsoft's open-source framework that helps security professionals and engineers red-team generative AI systems an
By Mindgard
Discover, assess and red team AI models, agents and applications with Mindgard’s attacker-aligned AI security platform. Mindgard AI Security Labs is Mindgard's software product, fr
By NCC Group
NCC Group is a UK cyber-security company. Public pages describe assurance, testing, incident response and related security services, including assessment of AI-enabled systems. NCC
By NVIDIA
garak (Generative AI Red-teaming and Assessment Kit) is a free, open-source command-line LLM vulnerability scanner maintained in NVIDIA's GitHub organisation. It checks whether a l
By SPLXAI
SplxAI provides the most comprehensive platform for AI Security Testing and Red Teaming, ensuring your AI Assistants and Agents are secure and reliable from build to runtime. Agent
Products
Claimed products appear first. Ranking packs and payment do not change this list.
- Adversa AI Red Teaming Platform· Adversa AI
- Agentic Radar· SPLXAI
- CyberSecEval· Meta
- DeepTeam· Confident AI
- F5 AI Red Team· F5
- garak· NVIDIA
- Giskard LLM Red Teaming· Giskard
- Giskard Open Source· Giskard
- HarmBench· Center for AI Safety
- PyRIT· Microsoft
Also used in this category
These products have a different primary category so they do not compete for the same ranking queries. They are listed here because buyers still encounter them in this job.
- HiddenLayer Automated Red Team· HiddenLayer
- Mindgard AI Security Labs· Mindgard
- NCC Group· NCC Group
Related categories
Relevant procurement and assurance guides
Frequently asked questions
What is Red teaming?
Offensive testing of AI systems by a team or platform, producing an engagement report. Jobs: engagements against llm apps; scenario libraries; reported findings.
What should not be listed as Red teaming?
Products whose buyer job is automated pentest products, guardrails, or eval platforms. Those belong on their own category page so search queries are not split.
Has AI Trustmark independently assessed every Red teaming supplier?
No. A category listing is descriptive. Independent assessment is shown only on company or product pages that carry Trustmark evidence.
What security testing evidence should buyers request for an AI product?
Ask what was tested, against which version, whether prompt-injection, data-exfiltration and tenant isolation were in scope, and where failed prompts were stored. A generic ISO certificate or a vendor scanner screenshot is not by itself an AI TrustMark assessment.
How should prompt injection and tool-output attacks be controlled?
Agents that read untrusted content or tool output can be instructed to exfiltrate data or take writes. Buyers should ask what is treated as untrusted, whether tool output can change the plan, and what tests were run. Scanner marketing is not the same as independent testing.
What model or provider changes should a buyer insist on being told about?
Material change usually includes a new model family, new region, new subprocessor, new write-capable tool, or a change that affects logging, privacy or human oversight. Those changes should trigger evidence refresh rather than a silent release.
How should buyers verify where AI customer data is processed?
Ask for the named processing locations, cloud regions and any subprocessors that see prompts, files or outputs. A directory listing is not evidence of residency. Independent assessment records the locations that were in scope on the assessment date.
Does a TrustMark on one product cover the rest of the company?
No. Independent assessment is scoped to the named organisation and, where relevant, the named product. Category pages list suppliers as a topic label. They do not imply that every listed company has been assessed.