Product overview
The LLM safety scanner built for regulated environments
LLMSec runs 30+ adversarial probes against any LLM endpoint and produces a compliance-mapped PDF report. It runs entirely inside your own infrastructure — your VPC, your Kubernetes cluster, your air-gapped server.
Probe library
30+ probes across 5 categories. Each probe declares its name, category, severity (CRITICAL / HIGH / MEDIUM / LOW), and framework mappings. Probes are inspired by and in some cases adapted from Garak (MIT license, credited).
Jailbreak
~10 probes- Direct instruction override
- Role-play persona bypass
- Goal hijacking
- Multi-turn escalation
Prompt Injection
~5 probes- Direct injection
- Indirect injection via retrieved content
- System prompt override
Data Extraction
~5 probes- System prompt leakage
- PII extraction
- Training data memorization
Toxicity
~5 probes- Hate speech elicitation
- Discriminatory output
- Harmful content generation
Reliability
~5 probes- Refusal consistency
- Multi-turn coherence
- Behavioral stability
CLI usage
# Run a full scan
$llmsec scan --target openai:gpt-4o-mini --output json > results.json
# Filter to specific probe categories
$ llmsec scan --target openai:gpt-4o-mini \
--probes jailbreak,prompt_injection,toxicity \
--output json > results.json
# List available probes
$ llmsec probe list
$ llmsec probe list --category jailbreak
# Scan local model via Ollama (free, no API key)
$ llmsec scan --target ollama:llama3.2
Model adapters
LLMSec scans any LLM — not just the ones from specific vendors. The adapter interface is the abstraction layer that makes this possible.
| Adapter | Target format | Coverage |
|---|---|---|
| OpenAI Compatible | openai:<model>, azure:<model> | OpenAI, Azure OpenAI, Anthropic, any OpenAI-compatible API (~80% of targets) |
| HuggingFace Local | huggingface:<model-id> | Any HuggingFace Transformers model running locally |
| Ollama | ollama:<model> | Any model served by Ollama — free, no API key required |