Basilisk

Basilisk is ranked #5 of 29 in AI security testing tools on The Geeks Club. It runs on Linux, macOS, Windows. There is a free plan.

Basilisk plans and pricing

All plans

AGPL-3.0 open-source software Free CLI, Desktop, Docker, or source distribution · authorized use only basilisk.rothackers.com · 30 Sept 2026

Compared on AI security testing tools

Free plan: Yes
Prompt injection tests: Yes
Jailbreak tests: Yes
Data leakage tests: Yes
Unsafe output tests: Yes
Custom test cases: Yes
Deployment mode: self_hosted

Best Basilisk alternatives

See all 12

7.3 F5 BIG-IP APM Free trial

7.3 OpenSecureAI Scanner Free plan

7.2 PyRIT Free plan

7.1 Augustus Free plan

7.1 Project Moonshot Free plan

7.1 Promptfoo Free plan

Basilisk

Purpose: Basilisk is an open-source AI/LLM red teaming framework for authorized security testing, vulnerability research, and academic study.
Attack modules: It includes 32 attack modules across 8 categories mapped to the OWASP LLM Top 10.
Prompt evolution: Its Smart Prompt Evolution engine uses 15 mutation operators, 5 crossover strategies, and multi-signal fitness scoring.
Multi-turn testing: Multi-turn modules perform prompt cultivation, authority escalation, and sycophancy exploitation with guardrail drift monitoring.
Provider integrations: It supports OpenAI, Anthropic, Google, xAI Grok, Groq, Azure OpenAI, GitHub Models, Ollama, and custom HTTP or WebSocket endpoints.
Reports: Basilisk exports HTML, SARIF 2.1.0, JSON, Markdown, and PDF reports.
CI/CD: GitHub Actions and GitLab CI integration uses SARIF output and can fail pipelines on critical findings.
Install methods: The project provides Windows, macOS, and Linux desktop packages, a pip CLI, Docker images, and source installation.
Prerequisites: The CLI requires Python 3.11 or higher and an API key for the LLM provider being tested.
Privacy: The CLI and Desktop app do not send telemetry, scan results, API keys, or personal data to Basilisk.
Local processing: Prompt evolution, payload mutation, and report generation run entirely on the user's local machine.
Supply-chain security: The project says it uses signed releases and verified checksums, while cautioning that it cannot guarantee absolute security.
License: Basilisk is released under the AGPL-3.0 license, permitting use, copying, modification, and distribution subject to the license and terms.
Authorized use: Users must obtain explicit written authorization before testing AI or LLM systems they do not own.
Price from: Free

Visit site Alternatives

Where it ranks on The Geeks Club

Best AI Security Testing Tools in 2026#5 of 29

Is Basilisk yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Basilisk

Sources

basilisk.rothackers.com/disclaimer· checked 30 Sept 2026
basilisk.rothackers.com· checked 30 Sept 2026
basilisk.rothackers.com/install· checked 30 Sept 2026
basilisk.rothackers.com/learn/Getting-Started· checked 30 Sept 2026
basilisk.rothackers.com/privacy· checked 30 Sept 2026
basilisk.rothackers.com/terms· checked 30 Sept 2026