Catalog Systems Guardrails & AI security PyRIT

PyRIT

https://microsoft.github.io/PyRIT/

Microsoft's Python Risk Identification Tool, an open framework for automated and human-led red teaming of generative AI systems. It runs multi-turn attack strategies such as Crescendo and TAP against any model or HTTP target.

Active · Verified 2026-10-29 · fresh as of 2026-10-29 · 13 cited facts, 0 with a third-party source · 1 recorded change · Suggest a correction

At a glance

Type
Framework vendor fix
Tier
T3
Section
Guardrails & AI security
Created
2023-12-12 repo fix
Latest release
last commit 2026-10-29 repo fix
License
MIT vendor fix
GitHub
https://github.com/microsoft/PyRIT (4712★) repo fix
Pricing
searched not found fix
Funding
searched not found fix
Freshness
2026-10-29 fix
Layer
agent-infra repo fix
Licensing
open-source vendor fix
SDK languages
python registry fix
Maintainer health
64 issues in 90 days, 34% answered or closed · 9 releases in 12 months (latest 2026-09-04) · bus factor 4 — as of 2026-11-01 repo

When to use

Optimised for: searched not found

Anti-fit: searched not found

Pros & cons

Pros

searched not found

Cons

searched not found

Claims & capabilities

Redirecting to PyRIT documentation (1.1.0) .

Technical surface

API surface
searched not found
Backend storage
searched not found
Deployment
searched not found
Embedding model
searched not found
Multi-tenancy
searched not found
MCP
searched not found
A2A
searched not found
OpenTelemetry
searched not found

Similar systems

Other guardrails & ai security in the catalog, ranked by inbound references.

  • Azure AI Content Safety Prompt Shields T3

    Azure AI Content Safety API that detects user prompt attacks and indirect (document) prompt injection aimed at manipulating a model's behavior, alongside groundedness, protected-material and task-adherence checks.

  • Amazon Bedrock Guardrails T3

    Configurable safeguards that filter harmful text and image content, redact sensitive information, block denied topics and detect hallucinations. They apply consistently across foundation models in Amazon Bedrock and self-hosted or third-party models.

  • Google Cloud Model Armor T3

    Runtime security service that screens AI prompts, responses and agent interactions for prompt injection, jailbreaks, malicious URLs, sensitive-data leaks and harmful content, with adjustable confidence thresholds.

  • CrowdStrike Falcon Guardian (formerly Pangea AI Guard) T3

    AI detection and response product that discovers, governs and secures AI agents at runtime across endpoint, cloud and SaaS. It is built on Pangea, which CrowdStrike agreed to acquire in September 2025, and pangea.cloud's AI Guard page now redirects here.

  • Guardrails AI T3

    Open-source guardrails framework plus the Guardrails Hub of validators that detect policy violations, hallucinations and data leakage in LLM and agent outputs at runtime. Harvey announced its acquisition of Guardrails AI on Sep 8, 2026.

  • Presidio T3

    Open-source framework for detecting, redacting, masking and anonymizing PII in text, images and structured data, commonly used to scrub prompts and responses around LLMs. Originally a Microsoft project, it has transitioned to community ownership under Data Privacy Stack.

Sources (12 cited facts, 0 third-party)

Each fact links to the page it came from; the badge says who published it (how to read sources).

What changed

Changes to this record's lifecycle, licence, release, pricing and hosting facts, from the catalog's git history. Subscribe (Atom)

  1. 2026-10-30 Added to the catalog #347

Related systems

References (4)