Basilisk

Free plan LinuxMacWindows

What Basilisk is

Basilisk is a free, open-source framework for authorized security testing, vulnerability research, and academic study of AI and LLM systems. It offers 32 attack modules in eight categories mapped to the OWASP LLM Top 10, including multi-turn tests that monitor guardrail drift. Its prompt evolution engine combines mutation operators, crossover strategies, and multiple signals to score results. Basilisk connects to several hosted model providers, local Ollama, and custom HTTP or WebSocket endpoints. Reports can be exported as HTML, SARIF 2.1.0, JSON, Markdown, or PDF; GitHub Actions and GitLab CI integrations can use SARIF and fail pipelines on critical findings. Desktop packages are available for Windows, macOS, and Linux, alongside pip, Docker, and source installation. The CLI requires Python 3.11 or higher and an API key for the provider being tested. Prompt evolution, payload mutation, and report generation run locally. Testing systems not owned by the user requires explicit written authorization.

Who it suits

Basilisk suits security practitioners, researchers, and students conducting authorized AI or LLM testing. Its CI integrations and report formats may also suit teams that incorporate findings into pipelines.

What it does well

32 attack modules span eight mapped categories.
Supports multiple model providers and custom endpoints.
Exports reports in five formats.
Prompt evolution and report generation run locally.
Free under the AGPL-3.0 license.

What to know first

CLI requires Python 3.11 or higher.
CLI requires an API key for the provider tested.
Testing systems not owned requires written authorization.

Limits

The software is free under AGPL-3.0. The CLI requires Python 3.11 or higher and an API key for the provider being tested; testing systems you do not own requires explicit written authorization.

Plans

Plan	Billed and limits	Price
AGPL-3.0 open-source software	CLI, Desktop, Docker, or source distribution · authorized use only	Free

As basilisk.rothackers.com lists them, read 30 Sept 2026. The maker's own page has the final word.

Getting started

Choose a Windows, macOS, or Linux desktop package, pip CLI, Docker image, or source installation.
For the CLI, install Python 3.11 or higher.
Obtain an API key for the LLM provider you plan to test.
Use Basilisk only on systems you own or have explicit written authorization to test.

Verdict

Basilisk offers broad testing, provider, reporting, and CI options, with local processing for key workflows. Users must obtain written authorization before testing systems they do not own.

Questions

How much does Basilisk cost?

The AGPL-3.0 open-source software plan is free.

Which platforms does Basilisk support?

It provides desktop packages for Windows, macOS, and Linux. It also offers a pip CLI, Docker images, and source installation.

Is Basilisk open source?

Yes. It is released under the AGPL-3.0 license, whose terms apply to use, copying, modification, and distribution.

Which AI providers can it connect to?

It supports OpenAI, Anthropic, Google, xAI Grok, Groq, Azure OpenAI, GitHub Models, Ollama, and custom HTTP or WebSocket endpoints.

What does the CLI require?

The CLI requires Python 3.11 or higher and an API key for the LLM provider being tested.

Can I test systems I do not own?

Only with explicit written authorization.

Facts from Basilisk's own pages

Attack modules: It includes 32 attack modules across 8 categories mapped to the OWASP LLM Top 10. · basilisk.rothackers.com, 30 Sept 2026
Authorized use: Users must obtain explicit written authorization before testing AI or LLM systems they do not own. · basilisk.rothackers.com, 30 Sept 2026
CI/CD: GitHub Actions and GitLab CI integration uses SARIF output and can fail pipelines on critical findings. · basilisk.rothackers.com, 30 Sept 2026
Install methods: The project provides Windows, macOS, and Linux desktop packages, a pip CLI, Docker images, and source installation. · basilisk.rothackers.com, 30 Sept 2026
License: Basilisk is released under the AGPL-3.0 license, permitting use, copying, modification, and distribution subject to the license and terms. · basilisk.rothackers.com, 30 Sept 2026
Local processing: Prompt evolution, payload mutation, and report generation run entirely on the user's local machine. · basilisk.rothackers.com, 30 Sept 2026
Multi-turn testing: Multi-turn modules perform prompt cultivation, authority escalation, and sycophancy exploitation with guardrail drift monitoring. · basilisk.rothackers.com, 30 Sept 2026
Prerequisites: The CLI requires Python 3.11 or higher and an API key for the LLM provider being tested. · basilisk.rothackers.com, 30 Sept 2026
Privacy: The CLI and Desktop app do not send telemetry, scan results, API keys, or personal data to Basilisk. · basilisk.rothackers.com, 30 Sept 2026
Prompt evolution: Its Smart Prompt Evolution engine uses 15 mutation operators, 5 crossover strategies, and multi-signal fitness scoring. · basilisk.rothackers.com, 30 Sept 2026
Provider integrations: It supports OpenAI, Anthropic, Google, xAI Grok, Groq, Azure OpenAI, GitHub Models, Ollama, and custom HTTP or WebSocket endpoints. · basilisk.rothackers.com, 30 Sept 2026
Purpose: Basilisk is an open-source AI/LLM red teaming framework for authorized security testing, vulnerability research, and academic study. · basilisk.rothackers.com, 30 Sept 2026
Reports: Basilisk exports HTML, SARIF 2.1.0, JSON, Markdown, and PDF reports. · basilisk.rothackers.com, 30 Sept 2026
Supply-chain security: The project says it uses signed releases and verified checksums, while cautioning that it cannot guarantee absolute security. · basilisk.rothackers.com, 30 Sept 2026
Support: Security issues and privacy questions can be reported to [email protected]. · basilisk.rothackers.com, 30 Sept 2026

Where Basilisk stands on Freedom251

AI Security Testing Tools#8 of 29