CISO Tribune

Vendor comparison · 2 companies

Archipelo vs Promptfoo

Archipelo develops Salmon, Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage. Promptfoo builds open-source tools for secure, reliable AI applications. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Archipelo
  • Promptfoo
Archipelo vs Promptfoo: Products, Customers and Funding Compared
ArchipeloArchipelo develops Salmon, Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage.archipelo.comPromptfooPromptfoo builds open-source tools for secure, reliable AI applications.promptfoo.dev
What it sells
  • Salmon[1][2][3][4][5]Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage.
  • Red Teaming[2][4][5]Simulates real users to uncover application-specific vulnerabilities.
  • Evaluations[2][5]LLM evaluation of prompts and models that can run inside CI workflows.
Categories
Headquarters
Not stated on its pagesSan Francisco, United States[1][3]
Founded
Not stated on its pages2024[1][12]
Ownership and funding
Not stated on its pagesOwned by OpenAI[12]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • March 9, 2026OpenAI agreed to buy Promptfoo, a startup helping businesses find and fix security issues in AI models during development.[13]
  • March 9, 2026OpenAI announced it has acquired Promptfoo, an AI security startup founded in 2024 to protect LLMs from adversarial attacks.[12]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
From its own pages, Archipelo's Salmon addresses software in which autonomous agents, tools, runtimes, and controllers perform consequential actions. Archipelo describes incident investigation teams as needing to work backward from a consequential state change toward the execution associated with it. Archipelo names systems that investigate, evaluate, govern, and depend upon execution as the systems for which verifiable execution history matters.Not written yet
Last verified
September 30, 2026November 4, 2026

Where they overlap

  • Archipelo and Promptfoo are both filed under AI model and agent security.

Where they differ, field by field

  • Archipelo's primary category is Software supply chain security; Promptfoo's is AI model and agent security.
  • Archipelo is also filed under Insider risk management. Promptfoo is also filed under AI firewalls and guardrails, Static application security testing and Breach simulation and automated pen-testing.
  • Archipelo lists Salmon. Promptfoo lists Red Teaming and Evaluations.
  • Promptfoo is headquartered in San Francisco, United States.
  • Promptfoo was founded in 2024.
  • Promptfoo is owned by OpenAI.

What it sells: Archipelo

What Salmon does[1][2][3][4][5]
Salmon is Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage. Execution is represented as a cryptographically signed event with explicit context. Salmon captures execution as it occurs upstream within supported environments.

What it sells: Promptfoo

What Red Teaming does[2][4][5]
Promptfoo creates thousands of context-aware attacks tailored to the customer's application. The open-source Community version includes up to 10k probes per month at no charge.
What Evaluations does[2][5]
Promptfoo's LLM evaluation can be integrated into a CircleCI pipeline. Promptfoo can be integrated with test frameworks like Jest and Vitest to evaluate prompts as part of existing testing and CI workflows. Promptfoo provides real-time alerts and automated evaluations to show LLM security status across all projects.

Questions about Archipelo and Promptfoo

What do Archipelo and Promptfoo sell?
Archipelo sells Salmon. Promptfoo sells Red Teaming and Evaluations.
Are Archipelo and Promptfoo in the same category?
They share AI model and agent security. Archipelo's primary category is Software supply chain security and Promptfoo's is AI model and agent security.
Where are Archipelo and Promptfoo headquartered?
Promptfoo is headquartered in San Francisco, United States.
When were Archipelo and Promptfoo founded?
Promptfoo was founded in 2024.
Who owns Archipelo and Promptfoo?
Promptfoo is owned by OpenAI.
Who are Archipelo and Promptfoo sold to?
From its own pages, Archipelo's Salmon addresses software in which autonomous agents, tools, runtimes, and controllers perform consequential actions.
What have Archipelo and Promptfoo announced recently?
March 9, 2026: OpenAI agreed to buy Promptfoo, a startup helping businesses find and fix security issues in AI models during development.

About Archipelo

Archipelo develops Salmon, Execution Verification Infrastructure for establishing cryptographically verifiable execution history and state lineage. Archipelo builds Salmon for autonomous multi-actor software systems. Archipelo, Inc. is the company developing and stewarding Salmon.[1][3][4][5]

Archipelo states that autonomous agents, tools, runtimes, and controllers increasingly perform consequential actions themselves. Archipelo states that the resulting state alone cannot show which execution occurred, in what order, or how each state transition derived from the ones before it. Archipelo develops infrastructure that makes autonomous multi-actor software execution independently verifiable. Archipelo states that safe and reliable agents need verifiable evidence of their execution history.[4][5]

Archipelo points to Git as showing the value of persistent, linked source code history. Archipelo says Execution Verification Infrastructure addresses a different problem, which is establishing a verifiable record of state transitions and the resulting state.

Archipelo describes execution as represented by a cryptographically signed event with explicit context. Archipelo states that Salmon captures execution as it occurs upstream within supported environments, not downstream after the event has already taken place. Archipelo states that Salmon does not visually or structurally manufacture execution continuity when execution continuity has not been established.

Archipelo states that agent generated changes can involve delegated execution, tools, subprocesses and multiple state transitions. Archipelo states that execution history provides a durable record of supported execution relationships to verify outcomes. Archipelo states that during incident investigation, teams need to work backward from a consequential state change toward the execution associated with it, to determine what caused the outcome.

One principle is that downstream systems should not be forced to establish execution history solely through retrospective inference where it can be captured during supported execution. Archipelo states that what an actor was permitted or instructed to do is distinct from what it actually executed. Archipelo states that machine-speed software systems require execution evidence that other software systems can consume and verify. Archipelo describes identity, policy, observability, security, engineering, and governance systems as solving adjacent problems.[5]

Archipelo describes itself as a deep tech company building foundational infrastructure for verifiable autonomous systems.[1][3][4][5]

Archipelo on the record

Sources

Archipelo full record

  1. [1]archipelo.comArchipelo · archipelo.com · undated page, accessed September 30, 2026 · Tier A
  2. [2]Archipelo - Making Autonomous Software Execution VerifiableArchipelo · undated page, accessed October 30, 2026 · Tier A
  3. [3]Terms of Service — SalmonArchipelo, Inc. · published September 20, 2026 · Tier A
  4. [4]Archipelo - This page has been retiredArchipelo · undated page, accessed October 30, 2026 · Tier A
  5. [5]About — SalmonArchipelo · undated page, accessed November 10, 2026 · Tier A

Promptfoo full record

  1. [1]PressPromptfoo · promptfoo.dev · undated page, accessed November 4, 2026 · Tier A
  2. [2]promptfoo.devPromptfoo · promptfoo.dev · undated page, accessed November 4, 2026 · Tier A
  3. [3]About Promptfoo | AI Security Experts | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  4. [4]Build Secure AI Applications | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  5. [5]Pricing | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  6. [6]Setting up Promptfoo with CircleCI | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  7. [7]Testing prompts with Jest and Vitest | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  8. [8]Finding LLM Jailbreaks with Burp Suite | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  9. [9]SharePoint Integration | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  10. [10]Langfuse integration | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  11. [11]AI Security for Real Estate | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  12. [12]OpenAI acquires Promptfoo to secure its AI agents | TechCrunchTechCrunch · published March 9, 2026 · Tier B
  13. [13]OpenAI Buying AI Security Startup Promptfoo to Safeguard AI Agents - BloombergBloomberg · published March 9, 2026 · Tier B

Spot a factual error? Request a correction.