#llm-security

• Open Source LLM Security Tools: Licensing and Cost

  Open source LLM security testing tools compared on license and self-hosting cost: garak, PyRIT, promptfoo, and Meta's Purple Llama safeguards.

• Best AI Red Teaming Tools for LLMs Compared

  Compare the best AI red teaming tools for LLMs: Garak, PyRIT, Promptfoo, and Giskard, on probe coverage, CI/CD fit, and OWASP LLM Top 10 mapping.

• Lethal Trifecta and CaMeL: Containing Agent Injection

  The lethal trifecta explains why agents get exfiltrated, and CaMeL shows what containment by construction looks like. Both are architecture, not prompting.

• Best LLM Guardrail Tools 2026: A Practitioner's Comparison

  A technical comparison of the best LLM guardrail tools 2026: NeMo Guardrails, LLM Guard, Lakera, Guardrails AI, and Azure Content Safety, with benchmarks.

• How LLM Jailbreaks Work: Techniques and Success Rates

  A practitioner's breakdown of how LLM jailbreaks work, from roleplay conditioning to multi-turn manipulation, with attack success rates from research.

• DAN Prompt Jailbreak Explained: How 'Do Anything Now' Works

  DAN (Do Anything Now) is the most replicated persona-injection jailbreak in LLM history. Here is the mechanism, why it worked, and how versions evolved.

• LLM Defense Stack: Guardrails, Tool Scoping, and Egress

  An LLM defense stack maps jailbreaks and prompt injection to guardrail models, scoped tools, least privilege, egress controls, and human approval.

• Why Jailbreaks Work: Competing Objectives and Generalization

  Jailbreaks are not a grab-bag of tricks. They exploit two structural failure modes of safety training: competing objectives and mismatched generalization.

• Garak in 2026: what it's actually good for, what it isn't

  An honest review of NVIDIA's Garak LLM vulnerability scanner: what its probes catch, where the noise is, and where it fits in a real testing pipeline.

• Indirect Prompt Injection in LLM Agents: Shipped Failures

  Tool-using LLM agents amplify every indirect prompt injection vector. A walkthrough of the exploit classes that have landed against production systems.

• Model Behavior Fingerprinting: Identifying a Wrapped LLM

  Before attacking an LLM app you need to know which model is under the hood. A walkthrough of behavioral fingerprinting and what each signal reveals.

• Multi-Turn Role-Play Attacks: Why One Safe Turn Gets Unsafe

  Crescendo, many-shot and gradual context manipulation: how multi-turn jailbreaks evade single-turn classifiers, and what still lands against defenses.

• Multimodal Jailbreaks: Image and Audio Attack Surfaces

  Vision and audio inputs are a separate attack channel from text. A survey of the multimodal jailbreaks that still land, from typographic to audio carriers.

• RAG Prompt Injection: Attack Surface and Defenses

  RAG prompt injection enters through retrieved documents to redirect tools, poison responses, or expose data. This guide maps defenses across the pipeline.

• System Prompt Extraction: Techniques and Defenses

  How system prompts get exfiltrated from production LLM apps: direct extraction, indirect inference, behavioral fingerprinting, and what actually works.

• Jailbreak Technique Catalog: Working as of 2026 Q2

  This catalog tracks ten jailbreak technique classes across production LLMs, covering Q2 2026 status, attack surfaces, trends, and defender guidance.

Browse all topics