NVIDIA

    NVIDIA/garak

    the LLM vulnerability scanner

    9.9K stars
    1.4K forks
    64 GitHub watchers
    Updated Nov 7, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    2 releases in the last 90 days, the latest 21 days ago, with 152 contributors on GitHub.

    Peaked at #71 in the weekly ranking the week of Oct 5, its best in the past year.

    Use Cases & Benefits

    • Scans large language models (LLMs) for vulnerabilities like hallucination, data leakage, prompt injection, misinformation, toxicity, and jailbreaks using adaptive probes.
    • Combines static, dynamic, and adaptive probing techniques to comprehensively detect diverse LLM failure modes and security weaknesses.
    • Use for red-teaming and security assessment of LLMs before deployment to identify exploitable weaknesses and improve model robustness.
    • Use for developers integrating LLMs to verify model safety against prompt injection and malicious content generation.
    • Use for researchers studying LLM security vulnerabilities and evaluating mitigation strategies across multiple model providers and APIs.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    Apache 2.0

    Permissive: commercial use, modification and redistribution are allowed with attribution; includes an explicit patent grant from contributors.

    Community files

    • README: present
    • Contributing guide: present
    • Code of conduct: present

    Watch-outs

    No watch-outs from GStars' checks.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    Generative AI Red-teaming & Assessment Kit

    garak checks if an LLM can be made to fail in a way we don't want. garak probes for hallucination, data leakage, prompt injection, misinformation, toxicity generation, jailbreaks, and many other weaknesses. If you know nmap or msf / Metasploit Framework, garak does somewhat similar things to them, but for LLMs.

    garak focuses on ways of making an LLM or dialog system fail. It combines static, dynamic, and adaptive probes to explore this.

    garak's a free tool. We love developing it and are always interested in adding functionality to support applications.

    Excerpt from the NVIDIA/garak README on GitHub (Apache-2.0 license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Sep 12: +6

    +1,075 stars over 81 days across 8 snapshot days; best day +6 on Sep 12.

    Forks

    1.4K+266

    Open issues

    548+160

    Compared with peers in AI

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 8, by 7-day star growth

    NVIDIA/garak compared with AI repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    D4Vinci/Scrapling101.1K+6.3K756 days ago
    thedotmack/claude-mem115.8K+4.7K75today
    heygen-com/hyperframes82.3K+4.0K75today
    harry0703/MoneyPrinterTurbo142.0K+3.8K753 days ago
    github/spec-kit149.2K+2.6K75today
    NVIDIA/garak9.9K—6421 days ago
    Category median115.8K+4.0K75—

    Also by NVIDIA

    Other repositories from this maintainer that GStars tracks

    Discover Repositories

    Search across tracked repositories by name or description