Point it at any agent.Watch it break.
Give it an endpoint. It runs an autonomous attack campaign and returns a graded security report.
Launch a campaignNo login. Runs in about a minute.
Target
shopbot-leaky
Grade
F
- System prompt disclosedcritical
- SSRF via injected canary URLhigh
- Refund policy overridemedium
3 breaches across 12 turns
How a campaign runs
1
Recon
Fingerprints the target's model, tools, and guardrails.
2
Attack
Runs an adaptive campaign that adjusts on every refusal.
3
Judge
Confirms each breach and catches quiet data leaks.
4
Report
Returns a graded report mapped to OWASP LLM risks.
Launch a campaign
Pick a sandbox target or bring your own endpoint.
Target
Fires one benign probe against the target.
Creates a campaign and streams the live attack.