Send a request

PyRIT

by Microsoft (AI Red Team)

Automate red teaming for generative AI

Python framework that lets security teams attack generative AI systems automatically to find risks.

Open SourceTrust 100For prosPython · Docker
Get it via OROBO

Checked sourcegithub.com/microsoft/PyRITLicence: MITchecked 3 hours agoGitHub lists a SHA-256 checksum for every release file.

Have it set up for you instead:Request setup by OROBOOr start with the AI Compass: a written assessment at a fixed price of €490 (businesses only).

How it runs for you

Simulation starting …

Illustration, not a real test run

What you get

What you get

  1. 01Builds repeatable attacks on AI systems
  2. 02Supports multi-turn conversation attacks
  3. 03Free and open source (MIT) from Microsoft

For you if …

  • Security teams running red-team exercises
  • AI product developers who know Python

Pick something else if …

  • Beginners without coding skills

How to start

In three steps.

What you need
  • Python skills
  • Access to the AI system you want to test
  1. 1Install with pip install pyrit
  2. 2Set a target, for example your chatbot endpoint
  3. 3Run an attack strategy and review the results

Part of these packages

PyRIT works together with other software.

Use AI safely

Your team uses AI — with far less risk of data leaks or hijacked chatbots.

5 stepsone day for the basicsMedium

Safety check

7 of 7 checks passed

No known malicious patterns in the install instructionsactively maintainedLicence: MIT

Trust 100
Who is behind it?
  • Taken by OROBO from the official source. The maker has not joined OROBO yet.
Is the code clean?
  • Source code publicly visible
  • Licence: MIT
  • No known malicious patterns in the install instructions
Is it maintained?
  • Website reachable
  • Updated today
Technical details & what we don’t check
  • Website loads fast
  • Website protection settings: 5 of 6 (website only, not the software)HSTS, CSP, nosniff, Frame-Schutz, Referrer-Policy

Claims about protection come from the maker. The trust score checks public signals, not effectiveness.

We automatically check origin, code patterns, licence, maintenance and reachability — again every day. We do not check whether the software fits your purpose, how it handles your data, or whether it works without errors. Last checked 3 hours ago. How OROBO checks

Alternatives for the same goal

garakMake it safe · NVIDIAHave your language model attacked on purposeOpen SourceTrust high, 100For developersGuardrails AIMake it safe · Guardrails AI (Harvey)Check AI answers before they move onOpen SourceTrust high, 100For developersNeMo GuardrailsMake it safe · NVIDIAFirm guardrails for your chatbotOpen SourceTrust high, 100For developersGiskardMake it safe · GiskardScan LLM apps for hallucinations and leaksOpen SourceTrust high, 100For developersMeta PurpleLlama (Llama Guard 4, Prompt Guard 2, LlamaFirewall)Make it safe · MetaFree guard models for your own AIOpen SourceTrust high, 100Runs offlineSnyk Agent Scan (formerly Invariant MCP-Scan)Make it safe · Snyk (ex-Invariant Labs team)Scan installed MCP servers and skills for trapsOpen SourceTrust high, 100For developersCisco Skill ScannerMake it safe · Cisco AI DefenseCheck agent skills before you install themOpen SourceTrust high, 100For developersDocker MCP GatewayMake it safe · DockerRun MCP servers sealed off in containersOpen SourceTrust high, 100For developers

Goes well with

OllamaBuild it yourself · OllamaRun language models locally with one commandOpen SourceTrust high, 97Runs offlinepromptfooMake it safe · Promptfoo (OpenAI)Test AI features like regular codeOpen SourceTrust high, 97For developersLakera GuardMake it safe · Lakera (Check Point Software)Catch prompt attacks before your AI respondsFree versionTrust high, 100For businessesCisco Skill ScannerMake it safe · Cisco AI DefenseCheck agent skills before you install themOpen SourceTrust high, 100For developersReality DefenderMake it safe · Reality Defender Inc.Detect deepfakes in voice, images and videoFree versionTrust high, 100Beginner-friendly

Facts

AreaMake it safe
PriceOpen Source
LicenceMIT
Runs onPython, Docker
Popular with developers★ 4,753 GitHub
Last updated05 Nov 2026
Sourcemicrosoft/PyRIT ↗
I am the maker