PromptRedTeam

Free plan APISelf-hostedWeb

Visit PromptRedTeam Alternatives Pricing

What PromptRedTeam is

PromptRedTeam scans user input for attacks before it reaches a large language model. It detects direct injection, role manipulation, zero-width injection, delimiter injection, and encoded payloads. Direct-injection checks look for override keywords, conflicting instructions, and prompt structure; role checks cover known jailbreak patterns, role-play scenarios, and bypass attempts. It also detects zero-width characters, normalizes Unicode, analyzes Base64 and other encodings, and can decode suspicious text before scanning it again. Delimiter checks look for context-breaking markers, Markdown abuse, and structural manipulation. Applications can use the hosted API, which the homepage demonstrates with a POST request to https://api.promptredteam.com/test, or run the project themselves. The live tester allows 10 requests per minute and accepts up to 1,000 characters; self-hosting provides unlimited usage. The site provides implementation examples in Python, JavaScript, and cURL. Its suggested workflow is to scan incoming text, then block threats or log them for review. PromptRedTeam is open source under the MIT License and is available through web, API, and self-hosted deployment.

Who it suits

PromptRedTeam suits developers who want to scan inputs before sending them to an LLM and then block or log threats. It offers a hosted demo and a self-hosted option for unlimited usage.

What it does well

Detects five listed categories of input attacks.
Can decode suspicious text and rescan it.
Provides Python, JavaScript, and cURL examples.
Self-hosting provides unlimited usage.
Open source under the MIT License.

What to know first

Hosted live tester allows 10 requests per minute.
Live tester accepts up to 1,000 characters per input.

Limits

The live tester allows 10 requests per minute and accepts up to 1,000 characters per input. Self-hosting provides unlimited usage.

Plans

Plan	Billed and limits	Price
Open source	Hosted demo: 10 requests/min · Self-hosted: unlimited usage	Free

As promptredteam.com lists them, read 9 Oct 2026. The maker's own page has the final word.

Getting started

Open https://promptredteam.com/ to use the web option.
For API use, send text to the hosted endpoint shown on the homepage: https://api.promptredteam.com/test.
Use the Python, JavaScript, or cURL integration example to connect an application.
Self-host the open-source project for unlimited usage.
Scan input before it reaches an LLM, then block threats or log them for review.

Verdict

PromptRedTeam provides multiple detection checks and a hosted API or self-hosted option for screening LLM inputs. The live tester has request and input-length limits; the site says self-hosting provides unlimited usage.

Questions

Is PromptRedTeam free?

Yes. The listed Open source plan costs nothing.

What does the hosted demo allow?

The live tester allows 10 requests per minute and accepts inputs up to 1,000 characters.

Can I self-host it?

Yes. The homepage says self-hosting provides unlimited usage.

What platforms does it support?

It is listed for web, API, and self-hosted use.

Is it open source?

Yes. The site describes it as open source under the MIT License.

What does it scan for?

It detects direct injection, role manipulation, zero-width injection, delimiter injection, and encoded payloads.

Facts from PromptRedTeam's own pages

Attack coverage: It detects direct injection, role manipulation, zero-width injection, delimiter injection, and encoded payloads. · promptredteam.com, 8 Oct 2026
Company details: The opened maker page does not state the maker's name, headquarters, or founding year. · promptredteam.com, 9 Oct 2026
Delimiter detection: The site says it detects context-breaking delimiters, markdown abuse, and structural manipulation. · promptredteam.com, 8 Oct 2026
Detection categories: It detects direct injection, role manipulation, zero-width injection, delimiter injection, and encoded payloads. · promptredteam.com, 9 Oct 2026
Direct injection detection: The site says direct injection detection uses pattern matching for override keywords, instruction conflicts, and prompt structure analysis. · promptredteam.com, 8 Oct 2026
Hidden and encoded text: The site describes zero-width character detection, Unicode normalization, Base64 and encoding analysis, and automatic decoding and rescanning. · promptredteam.com, 8 Oct 2026
Hosted API: The site demonstrates sending text to https://api.promptredteam.com/test using a POST request with JSON. · promptredteam.com, 9 Oct 2026
Integration examples: The site provides implementation examples for Python, JavaScript, and cURL. · promptredteam.com, 9 Oct 2026
License: The homepage describes PromptRedTeam as open source under the MIT License. · promptredteam.com, 8 Oct 2026
Live testing limit: The live demo allows 10 requests per minute and accepts up to 1,000 characters in its input field. · promptredteam.com, 9 Oct 2026
Open source license: The site describes the project as open source under the MIT License. · promptredteam.com, 9 Oct 2026
Purpose: PromptRedTeam scans user inputs for prompt injection before they reach an LLM. · promptredteam.com, 9 Oct 2026
Rate limit: The live tester allows 10 requests per minute and says deploying your own provides unlimited usage. · promptredteam.com, 8 Oct 2026
Role manipulation detection: The site says role manipulation detection recognizes known jailbreak patterns, role-play scenarios, and bypass attempts. · promptredteam.com, 8 Oct 2026
Self-hosting: The site says users can self-host for unlimited usage. · promptredteam.com, 9 Oct 2026
Suggested use: The homepage suggests scanning inputs before they reach an LLM, then blocking threats or logging them for review. · promptredteam.com, 8 Oct 2026
Workflow: The site says applications can scan inputs before they reach an LLM and block threats or log them for review. · promptredteam.com, 9 Oct 2026

Where PromptRedTeam stands on Freedom251

AI Red Teaming Tools#13 of 27