Security teams that want an autonomous red teaming service for AI agents, with findings mapped to frameworks for reporting
Teams whose AI app is reached through a chat or upload interface and who want that interface attacked, not only the model API
Consider instead if
You want an open-source tool you can run and extend yourself, without a vendor account.
See garak or PyRIT.
You need a documented CLI (Mindgard) or an on-premises deployment and named plans (SPLX), which Repello's public pages do not describe.
See Mindgard or SPLX.
What Repello AI does
Repello AI sells ARTEMIS, a red teaming product aimed at AI agents and the apps around them more than at bare models. Two things separate it from the other hosted red teaming listings here: a Browser Mode that attacks the application through its own web interface (chats, clicks, uploads) next to API testing, and tests that chain exploits across an agent's steps. The product page cites an attack library of over 1,000 entries and coverage of more than 100 languages. What the public pages leave out matters to a buyer: no prices, no ARTEMIS documentation, no named model providers and no hosting model beyond a free web scan. Treat the OWASP, NIST and EU AI Act mapping as a reporting feature to check in a demo.
This summary is our own wording of the sourced facts on this page.
Key facts
Each value links to the page that states it, with the date we checked it.
Our editorial model, not a standard. The primary layer follows the category, except for tools whose main documented job is detection and response; other layers rest on a capability the sources document.
How the model works.
AI security layers that Repello AI covers, with the role, how each applies and what it rests on
The product page says it discovers and validates multi-stage exploit chains in AI agents.
Discovers and validates multi-stage exploit chains in AI agents
Not mapped in our analysis: LLM01, LLM02, LLM05, LLM07, LLM09.
These are risks we expect tools in this category to cover; the sources we checked do not document a matching capability.
Generates adversarial test suites for LLM agents and RAG apps, runs them and reports failures by threat type.
Best for: Python teams that want a free library to scan an LLM agent or RAG app for prompt injection and harmful output, and to write pass or fail checks for it
Runs evals and red team scans against LLM apps from a CLI or CI pipeline and writes a vulnerability report.
Best for: Developer teams that want one open-source CLI for both prompt evals and red teaming, run locally and in CI
80Coverage Score 80 out of 100
LLM01 Prompt Injection
LLM02 Sensitive Information Disclosure
LLM09 Misinformation
Reviewed
Repello AI FAQ
What is ARTEMIS?
It is Repello AI's red teaming product. The product page describes autonomous testing of AI applications and agents using multi-turn, multi-stage attacks.
Does Repello AI publish prices?
Not on the pages we read. The home page offers a demo request and a free scan of an AI agent.
Which frameworks can findings map to?
The product page says findings can be mapped to MITRE, OWASP, NIST, ISO 42001 and the EU AI Act.
Is ARTEMIS the same as ARGUS?
No. ARTEMIS is the testing product this page covers. ARGUS is Repello's separate runtime product that screens live traffic, and Inventory is its AI asset discovery product. A team that wants findings turned into blocking rules would need ARGUS or another guardrail on top of ARTEMIS.
We have no commercial relationship with Repello AI.
Sources & last reviewed
Last reviewed . We compile from the vendors' own public
pages and repositories and we do not run the products. Source links open in a new tab. Found a mistake? Report a correction.
We may use analytics and, later, show ads. They stay off until you choose, wherever you are. Declining
never limits what you can read. See our privacy policy and
cookie policy.
Privacy settings
Choose what you allow. Your choice is stored on this device for 13 months. You can change it later from the
"Privacy choices" link in the footer.