ProofLayer

Free plan APILinuxSelf-hostedWeb

What ProofLayer is

ProofLayer helps developers and teams assess AI security before deployment and protect MCP traffic at runtime. Its open-source scanner checks coding agents, MCP servers, prompts, skills, code, and packages from a developer workstation, CI, or as an MCP tool. It can flag prompt injection, hallucinated packages, exposed secrets, unsafe MCP tools, and vulnerable generated code. For broader testing, automated attack campaigns probe LLM applications, multi-agent systems, RAG pipelines, and MCP servers for issues such as jailbreaks, data exfiltration, tool abuse, RAG poisoning, and memory injection. Verified breaches include replay traces and audit-ready evidence. Runtime checks cover tool poisoning, prompt injection, excessive permissions, unsafe tool execution, data exfiltration, and supply-chain risk. Listed targets include OpenAI, Anthropic, Azure OpenAI, self-hosted Qwen, Llama, and Mistral, along with LangGraph, LangChain, ChromaDB, and MCP servers. Runtime integrations include LangChain, OpenAI Agents SDK, CrewAI, AutoGen, Semantic Kernel, and Pydantic AI. ProofLayer says it generates evidence for SOC 2, NIST AI RMF, the EU AI Act, and ISO/IEC 42001. Community is free; Enterprise pricing is on request. The pricing comparison lists SaaS or VPC deployment and private-preview access.

Who it suits

The free Community plan suits individual developers and small teams seeking a security scanner for coding agents and MCP tools. Enterprise is positioned for organizations that need continuous red-teaming, compliance reporting, and dedicated support.

What it does well

Free Community plan includes a CLI and MCP security scanner.
Includes more than 1,700 detection rules.
Scans prompts, skills, code, packages, and MCP servers.
Automated campaigns test LLM and multi-agent systems.
Verified breaches include replay traces and audit-ready evidence.
Lists integrations across several agent frameworks and model providers.

What to know first

Enterprise pricing is available only on request.
Enterprise deployment access is listed as private preview.

Limits

The Community plan is the free option and lists the scanner, detection rules, prompt injection probes, MCP tool testing, and community rule library. Enterprise price is on request, and access is listed as private preview.

Plans

Plan	Billed and limits	Price
Community	Security scanner (CLI + MCP) · 1,700+ detection rules · prompt injection probes · MCP tool testing · community rule library · MIT licensed	Free
Enterprise	Continuous autonomous red-teaming · proof-of-exploit reports · compliance reporting (SOC 2, ISO 27001) · SSO/SAML · SLA guarantees · CISO executive portal · dedicated support and onboarding · custom attack scenarios	On request

As proof-layer.com lists them, read 30 Sept 2026. The maker's own page has the final word.

Getting started

Visit the ProofLayer website.
Choose the free Community plan or contact ProofLayer about Enterprise.
Use the scanner from a developer workstation, CI, or as an MCP tool.
For Enterprise details, request pricing and discuss SaaS or VPC deployment.

Verdict

Choose ProofLayer Community for a free, MIT-licensed scanner with broad checks for coding agents and MCP servers. Enterprise is a fit for teams seeking ongoing autonomous red-teaming and compliance features, with pricing available on request.

Questions

Is ProofLayer free?

Yes. The Community plan is listed as free.

What platforms does it support?

Listed platforms are API, Linux, self-hosted, and web.

What does the Community plan include?

It includes a CLI and MCP security scanner, 1,700+ detection rules, prompt injection probes, MCP tool testing, a community rule library, and an MIT license.

What does Enterprise add?

Enterprise lists continuous autonomous red-teaming, proof-of-exploit reports, compliance reporting, SSO/SAML, SLA guarantees, a CISO executive portal, dedicated support and onboarding, and custom attack scenarios.

Which systems are listed as targets or integrations?

Targets include OpenAI, Anthropic, Azure OpenAI, self-hosted Qwen, Llama, and Mistral, plus LangGraph, LangChain, ChromaDB, and MCP servers. Runtime integrations include LangChain, OpenAI Agents SDK, CrewAI, AutoGen, Semantic Kernel, and Pydantic AI.

How is ProofLayer deployed?

The pricing comparison lists SaaS or VPC deployment, with access marked private preview.

Facts from ProofLayer's own pages

Attack classes: Campaigns test prompt injection, jailbreaks, data exfiltration, tool abuse, RAG poisoning, and memory injection. · proof-layer.com, 30 Sept 2026
Coding agent scanner: The open-source scanner checks coding agents, MCP servers, prompts, skills, code, and packages from a developer workstation, CI, or as an MCP tool. · proof-layer.com, 30 Sept 2026
Compliance evidence: ProofLayer says it generates evidence for SOC 2, NIST AI RMF, EU AI Act, and ISO/IEC 42001. · proof-layer.com, 30 Sept 2026
Deployment options: The pricing comparison lists ProofLayer deployment as SaaS or VPC and access as private preview. · proof-layer.com, 30 Sept 2026
Enterprise features: The Enterprise plan lists continuous autonomous red-teaming, proof-of-exploit reports, SSO/SAML, SLA guarantees, a CISO executive portal, dedicated support and onboarding, and custom attack scenarios. · proof-layer.com, 30 Sept 2026
Integrations and targets: Listed targets include OpenAI, Anthropic, Azure OpenAI, self-hosted Qwen/Llama/Mistral, LangGraph, LangChain, ChromaDB, and MCP servers. · proof-layer.com, 30 Sept 2026
Intended users: The Community plan is described for individual developers and small teams; the Enterprise plan is positioned for dedicated red-teaming and compliance needs. · proof-layer.com, 30 Sept 2026
Red teaming: Autonomous attack campaigns test LLM applications, multi-agent systems, RAG pipelines, and MCP servers; verified breaches include replay traces and audit-ready evidence. · proof-layer.com, 30 Sept 2026
Runtime integrations: The MCP runtime security page lists LangChain, OpenAI Agents SDK, CrewAI, AutoGen, Semantic Kernel, and Pydantic AI integrations. · proof-layer.com, 30 Sept 2026
Runtime protection: MCP runtime security tests for tool poisoning, prompt injection, excessive permissions, unsafe tool execution, data exfiltration, and supply-chain risk. · proof-layer.com, 30 Sept 2026
Scanner coverage: The scanner flags prompt injection, hallucinated packages, exposed secrets, unsafe MCP tools, and vulnerable generated code. · proof-layer.com, 30 Sept 2026
What it does: ProofLayer scans AI code before deployment, red-teams agents continuously, and protects MCP traffic at runtime, turning findings into audit-ready evidence. · proof-layer.com, 30 Sept 2026

Where ProofLayer stands on Freedom251

AI Red Teaming Tools#10 of 27