confident-ai

    confident-ai/deepteam

    DeepTeam is a framework to red team LLMs and AI agents.

    backend
    llm-guardrails
    llm-red-teaming
    llm-safety
    llm-seecurity
    python
    Python
    Apache-2.0
    3.1K stars
    500 forks
    3.1K GitHub watchers
    Updated Oct 26, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    No releases in the last 90 days; the most recent was 348 days ago, with 25 contributors on GitHub.

    Use Cases & Benefits

    • Provides a Python framework to red team large language models and AI agents by simulating attacks and uncovering vulnerabilities.
    • Enables local, dynamic adversarial testing with 50+ built-in vulnerabilities and 20+ attack methods, plus production guardrails for real-time protection.
    • Use for penetration testing LLMs to identify bias, privacy leaks, and security flaws before deployment.
    • Use for validating AI safety compliance by automatically mapping tests to established frameworks like OWASP and NIST.
    • Use for integrating continuous vulnerability monitoring and risk assessment in production AI systems with guardrails and reporting.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    Apache 2.0

    Permissive: commercial use, modification and redistribution are allowed with attribution; includes an explicit patent grant from contributors.

    Community files

    • README: present

    Watch-outs

    No watch-outs from GStars' checks.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    DeepTeam is a simple-to-use, open-source red teaming framework for LLM systems. Think of it as penetration testing, but for LLMs.

    DeepTeam simulates attacks — jailbreaking, prompt injection, multi-turn exploitation, and more — to uncover vulnerabilities like bias, PII leakage, and SQL injection in your AI agents, RAG pipelines, and chatbots. It also offers guardrails to prevent these issues in production.

    DeepTeam runs locally on your machine and is built on DeepEval, the open-source LLM evaluation framework.

    Want to talk LLM security, need help picking attacks, or just to say hi? Come join our discord.

    DeepTeam does not require you to define what LLM system you are red teaming — because neither will malicious users. All you need to do is install deepteam, define a model_callback, and you're good to go.

    Excerpt from the confident-ai/deepteam README on GitHub (Apache-2.0 license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Aug 11: +12

    +641 stars over 78 days across 7 snapshot days; best day +12 on Aug 11.

    Forks

    500+110

    Open issues

    81+28

    Compared with peers in Backend

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth

    confident-ai/deepteam compared with Backend repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    anthropics/skills187.8K+2.9K15—
    DuarteSantos8/openGym19.7K+2.4K602 days ago
    shiyu-coder/Kronos47.0K+2.3K16—
    NationalSecurityAgency/ghidra98.2K+2.3K6414 days ago
    microsoft/VibeVoice56.0K+1.1K29—
    confident-ai/deepteam3.1K—23348 days ago
    Category median56.0K+2.3K29—

    Also by confident-ai

    Other repositories from this maintainer that GStars tracks

    Discover Repositories

    Search across tracked repositories by name or description