Send a request

garak

by NVIDIA

Have your language model attacked on purpose

Command-line scanner that probes a language model with hundreds of attacks for jailbreaks, leaks and hallucinations.

Open SourceTrust 100Some practice neededTerminal · Python · Linux · macOS
Get it via OROBO

Checked sourcegithub.com/NVIDIA/garakLicence: Apache-2.0checked 11 hours agoGitHub lists a SHA-256 checksum for every release file.

Have it set up for you instead:Request setup by OROBOOr start with the AI Compass: a written assessment at a fixed price of €490 (businesses only).

How it runs for you

Simulation starting …

Illustration, not a real test run

What you get

What you get

  1. 01Probes with hundreds of attacks for jailbreaks and leaks
  2. 02Also checks hallucinations and toxic output
  3. 03Free and open source from NVIDIA

For you if …

  • Developers before releasing a chatbot
  • Researchers comparing models

Pick something else if …

  • If you do not want to use the command line

How to start

In three steps.

What you need
  • Python
  • Access to the model, local or via API
  1. 1Install with pip install garak
  2. 2Pick model and attacks via --model_type and --probes
  3. 3Read the report and fix weaknesses

Part of these packages

garak works together with other software.

Use AI safely

Your team uses AI — with far less risk of data leaks or hijacked chatbots.

5 stepsone day for the basicsMedium

Safety check

7 of 7 checks passed

No known malicious patterns in the install instructionsactively maintainedLicence: Apache-2.0

Trust 100
Who is behind it?
  • Taken by OROBO from the official source. The maker has not joined OROBO yet.
Is the code clean?
  • Source code publicly visible
  • Licence: Apache-2.0
  • No known malicious patterns in the install instructions
Is it maintained?
  • Website reachable
  • Updated today
Technical details & what we don’t check
  • Website loads fast
  • Website protection settings: 5 of 6 (website only, not the software)HSTS, CSP, nosniff, Frame-Schutz, Referrer-Policy

Claims about protection come from the maker. The trust score checks public signals, not effectiveness.

We automatically check origin, code patterns, licence, maintenance and reachability — again every day. We do not check whether the software fits your purpose, how it handles your data, or whether it works without errors. Last checked 11 hours ago. How OROBO checks

Alternatives for the same goal

Guardrails AIMake it safe · Guardrails AI (Harvey)Check AI answers before they move onOpen SourceTrust high, 100For developersNeMo GuardrailsMake it safe · NVIDIAFirm guardrails for your chatbotOpen SourceTrust high, 100For developersGiskardMake it safe · GiskardScan LLM apps for hallucinations and leaksOpen SourceTrust high, 100For developersPyRITMake it safe · Microsoft (AI Red Team)Automate red teaming for generative AIOpen SourceTrust high, 100For developersMeta PurpleLlama (Llama Guard 4, Prompt Guard 2, LlamaFirewall)Make it safe · MetaFree guard models for your own AIOpen SourceTrust high, 100Runs offlineSnyk Agent Scan (formerly Invariant MCP-Scan)Make it safe · Snyk (ex-Invariant Labs team)Scan installed MCP servers and skills for trapsOpen SourceTrust high, 100For developersCisco Skill ScannerMake it safe · Cisco AI DefenseCheck agent skills before you install themOpen SourceTrust high, 100For developersDocker MCP GatewayMake it safe · DockerRun MCP servers sealed off in containersOpen SourceTrust high, 100For developers

Goes well with

OllamaBuild it yourself · OllamaRun language models locally with one commandOpen SourceTrust high, 97Runs offlinepromptfooMake it safe · Promptfoo (OpenAI)Test AI features like regular codeOpen SourceTrust high, 97For developersLakera GuardMake it safe · Lakera (Check Point Software)Catch prompt attacks before your AI respondsFree versionTrust high, 100For businessesCisco Skill ScannerMake it safe · Cisco AI DefenseCheck agent skills before you install themOpen SourceTrust high, 100For developersReality DefenderMake it safe · Reality Defender Inc.Detect deepfakes in voice, images and videoFree versionTrust high, 100Beginner-friendly

Facts

AreaMake it safe
PriceOpen Source
LicenceApache-2.0
Runs onTerminal, Python, Linux, macOS
Popular with developers★ 9,862 GitHub
Last updated04 Nov 2026
SourceNVIDIA/garak ↗
I am the maker