RedLens AI

What RedLens AI is

RedLens AI runs automated adversarial attacks against production AI systems and connects findings to controls used in security audits. It is aimed at healthcare, law enforcement, and regulated enterprise organizations that deploy AI. Its Master Attack Schema v2.0 covers six attack categories and 22 methodologies, with findings scored by CVSS. Each assessment produces a PDF containing a risk score, vulnerabilities, remediation steps, and mappings to frameworks including HIPAA, NIST AI RMF, OWASP GenAI Top 10, MITRE ATLAS, ISO/IEC 42001, FBI CJIS Security Policy, and AIUC-1. The framework mappings are evidence, not certification.

Teams can schedule daily or weekly retests to detect drift, and critical findings can trigger logged email alerts. The Blast Radius Mapper accepts tool schemas in OpenAPI, Anthropic, or OpenAI formats. A Python CLI and GitHub Action support pipeline scans, severity build gates, and SARIF output for GitHub code scanning. Findings can stream to Splunk, SentinelOne, Devo, or an HMAC-signed webhook.

Deployment choices include hosted SaaS and Enterprise self-hosted on-premise Docker, as well as an MSSP console with per-client isolation. In the self-hosted package, customer data is stored in the customer's Postgres, while attack generation and judging still call Anthropic's API using the customer's key. Plans range from a free tier to paid options starting at $799/mo; Enterprise is listed at $150k/yr+.

Who it suits

RedLens AI suits healthcare, law enforcement, and regulated enterprise organizations that need to assess AI agents, models, or other AI systems. Its pipeline tools and scheduled retests also fit teams that want recurring assessments or scan results in development and security workflows.

Limits

The free plan allows 25 hosted scans per month, five scans per day, and one AI asset under test; work email verification is required. Its judge is Claude Haiku 4.5. Paid plans start at $799/mo; the Developer plan covers one AI agent or model and one monitored production workflow.

Getting started

1. Open redlens.ai and choose the free plan or a paid plan.
2. For a hosted assessment, provide the AI asset under test and run a scan.
3. For pipeline scans, use the Python CLI or GitHub Action and configure severity build gates as needed.
4. For blast radius mapping, provide a tool schema in OpenAPI, Anthropic, or OpenAI format.
5. Choose Enterprise self-hosted on-premise Docker deployment if that deployment model is required.

Verdict

Choose RedLens AI if you need automated adversarial assessments with report exports, framework mappings, and recurring retests. Look elsewhere if your required alert channel is Slack or Teams, or if your deployment must keep attack generation and judging off Anthropic's API.