AI red teaming & LLM evaluation

Repello AI: autonomous AI red teaming platform

Repello AI is an autonomous AI red teaming platform from Repello AI. It is a commercial product offered as: SaaS. Pricing model: not published.

  • Last reviewed

Best for

  • Security teams that want an autonomous red teaming service for AI agents, with findings mapped to frameworks for reporting
  • Teams whose AI app is reached through a chat or upload interface and who want that interface attacked, not only the model API

Consider instead if

  • You want an open-source tool you can run and extend yourself, without a vendor account. See garak or PyRIT.
  • You need a documented CLI (Mindgard) or an on-premises deployment and named plans (SPLX), which Repello's public pages do not describe. See Mindgard or SPLX.

What Repello AI does

Repello AI sells ARTEMIS, a red teaming product aimed at AI agents and the apps around them more than at bare models. Two things separate it from the other hosted red teaming listings here: a Browser Mode that attacks the application through its own web interface (chats, clicks, uploads) next to API testing, and tests that chain exploits across an agent's steps. The product page cites an attack library of over 1,000 entries and coverage of more than 100 languages. What the public pages leave out matters to a buyer: no prices, no ARTEMIS documentation, no named model providers and no hosting model beyond a free web scan. Treat the OWASP, NIST and EU AI Act mapping as a reporting feature to check in a demo.

This summary is our own wording of the sourced facts on this page.

Key facts

Each value links to the page that states it, with the date we checked it.

Latest release
Not documented in the sources we checked
Pricing model
Not published in the sources we checked Source, checked October 21, 2026: repello.ai (opens in a new tab)
Documentation
Not documented in the sources we checked
API reference
Not documented in the sources we checked
Quickstart
Not documented in the sources we checked
Security page
Not documented in the sources we checked
Attestations or disclosure
AICPA SOC and ISO 27001 badges are shown on the home page Source, checked October 21, 2026: repello.ai (opens in a new tab)

Capabilities

As documented by the vendor or project. The tag is our label from a controlled vocabulary.

Where Repello AI fits in our AI security layers

Our analysis

Our editorial model, not a standard. The primary layer follows the category, except for tools whose main documented job is detection and response; other layers rest on a capability the sources document. How the model works.

AI security layers that Repello AI covers, with the role, how each applies and what it rests on
LayerRoleHow it appliesBased on
L4 Testing Testing and red teaming Primary Attack and evaluate models, apps and agents on purpose, before release and after every change, to find what the other layers miss. Follows its category, AI red teaming & LLM evaluation

OWASP LLM Top 10 mapping

Our analysis

The risk list is OWASP's (Top 10 for LLM Applications, 2025). The mapping is our analysis, and each row rests on a capability the sources document.

OWASP LLM risks mapped to Repello AI, with the capabilities each mapping rests on
RiskHow it appliesBased on
LLM06 Excessive Agency The product page says it discovers and validates multi-stage exploit chains in AI agents. Discovers and validates multi-stage exploit chains in AI agents

Alternatives and related tools

More in AI red teaming & LLM evaluation, ranked within the category by Coverage Score.

garak

NVIDIA

Open sourceApache-2.0
  • CLI
  • Library
  • Self-hosted

Probes language models and LLM apps for prompt injection, jailbreaks, data leakage and more.

Best for: Teams that want a free command-line scanner they can point at any model or LLM endpoint before release

Coverage Score 82 out of 100
  • LLM01 Prompt Injection
  • LLM02 Sensitive Information Disclosure
  • LLM09 Misinformation

Reviewed

Giskard

Giskard AI

Open sourceApache-2.0 Freemium
  • Library
  • Self-hosted
  • SaaS
  • On-prem

Generates adversarial test suites for LLM agents and RAG apps, runs them and reports failures by threat type.

Best for: Python teams that want a free library to scan an LLM agent or RAG app for prompt injection and harmful output, and to write pass or fail checks for it

Coverage Score 81 out of 100
  • LLM01 Prompt Injection
  • LLM02 Sensitive Information Disclosure
  • LLM09 Misinformation

Reviewed

Promptfoo

OpenAI (Promptfoo)

Open sourceMIT Freemium
  • CLI
  • Library
  • Self-hosted
  • SaaS
  • On-prem

Runs evals and red team scans against LLM apps from a CLI or CI pipeline and writes a vulnerability report.

Best for: Developer teams that want one open-source CLI for both prompt evals and red teaming, run locally and in CI

Coverage Score 80 out of 100
  • LLM01 Prompt Injection
  • LLM02 Sensitive Information Disclosure
  • LLM09 Misinformation

Reviewed

Repello AI FAQ

What is ARTEMIS?

It is Repello AI's red teaming product. The product page describes autonomous testing of AI applications and agents using multi-turn, multi-stage attacks.

Does Repello AI publish prices?

Not on the pages we read. The home page offers a demo request and a free scan of an AI agent.

Which frameworks can findings map to?

The product page says findings can be mapped to MITRE, OWASP, NIST, ISO 42001 and the EU AI Act.

Is ARTEMIS the same as ARGUS?

No. ARTEMIS is the testing product this page covers. ARGUS is Repello's separate runtime product that screens live traffic, and Inventory is its AI asset discovery product. A team that wants findings turned into blocking rules would need ARGUS or another guardrail on top of ARTEMIS.

Key facts you can cite

We have no commercial relationship with Repello AI.

Sources & last reviewed

Last reviewed . We compile from the vendors' own public pages and repositories and we do not run the products. Source links open in a new tab. Found a mistake? Report a correction.