garak: pricing and features
by NVIDIA (open-source project)
Prices and features checked 2026-10-20 on the vendor's own pages. Anything we could not confirm says “not verified”. We don't score or rank tools: how we review.
Short answer: garak is best for: Security and ML teams that want a free command-line scanner to probe a model or chat system for jailbreaks, prompt injection, data leakage and similar failures. Free tier: Free, open source (Apache-2.0) [source, checked 2026-10-20]. Entry paid plan: No paid plan published [source, checked 2026-10-20].
What is garak? garak (“Generative AI Red-teaming & Assessment Kit”) is an open-source LLM vulnerability scanner developed by NVIDIA and the community. It sends static, dynamic and adaptive probes to a model or REST-accessible system and uses detectors to flag failures such as hallucination, data leakage, prompt injection, misinformation, toxic output and jailbreaks. It is a command-line tool with no hosted product.
What it does and how it runs
| What it probes for | Hallucination, data leakage, prompt injection, misinformation, toxicity generation, jailbreaks and other weaknesses [source] |
|---|---|
| What it can scan | Hugging Face Hub models, Replicate, the OpenAI API, AWS Bedrock, LiteLLM, gguf models via llama.cpp, and most systems reachable over REST [source] |
| How a run works | garak --target_type <type> --target_name <model>; by default it runs every probe with each probe's recommended detectors, or pick some with --spec (e.g. probes.encoding) [source] |
| Results | A results row per probe and detector in the terminal; a detailed .jsonl run log plus garak.log, and an analysis script that lists the prompts with the most hits [source] |
| Latest release | v0.17.1, 16 Oct 2026 [source] |
| Who maintains it | garak.ai says the project is backed by NVIDIA and is research-led; a paper describes the design [source] |
Pricing
- Free tier
- Free, open source (Apache-2.0) [source, checked 2026-10-20]
- Entry paid price
- No paid plan published [source, checked 2026-10-20]
- What you pay for (meter)
- No plans or meter: the README calls garak a free tool [source]
- Licence
- Apache-2.0 [source]
- Self-hosting
- Runs on your own machine as a Python command-line tool (pip install -U garak); developed on Linux and macOS [source]
- Data retention
- not verified
Features
| OpenTelemetry | not verified |
|---|---|
| CI gating | not verified |
| LLM-as-judge | not verified |
| Human annotation | not verified |
| Prompt management | not verified |
| Dataset versioning | not verified |
| SOC 2 / HIPAA | not verified |
Compare
- Promptfoo alternatives for red-teaming: garak next to Giskard and Promptfoo's own free red-teaming
- Promptfoo pricing and features · DeepEval vs Promptfoo
- LLM evaluation platforms compared (garak and Giskard are scanners and test libraries, so they are not in that 12-platform table)
Other red-teaming tools: Giskard