CISO Tribune

Vendor comparison · 2 companies

Lakera vs Promptfoo

Lakera sells AI Red Teaming, AI Agent Security and Workforce AI Security, which together help organizations secure employees, applications, and autonomous agents. Promptfoo builds open-source tools for secure, reliable AI applications. CISO Tribune files both under AI firewalls and guardrails and AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Lakera
  • Promptfoo
Lakera vs Promptfoo: Products, Customers and Funding Compared
LakeraLakera sells AI Red Teaming, AI Agent Security and Workforce AI Security, which together help organizations secure employees, applications, and autonomous agents.lakera.aiPromptfooPromptfoo builds open-source tools for secure, reliable AI applications.promptfoo.dev
What it sells
  • AI Red Teaming[1][5][6]A continuous workflow to evaluate, scan, and red team AI applications and agents.
  • Red Teaming[2][4][5]Simulates real users to uncover application-specific vulnerabilities.
  • Evaluations[2][5]LLM evaluation of prompts and models that can run inside CI workflows.
Categories
Headquarters
Zurich, Switzerland[2]San Francisco, United States[1][3]
Founded
2021[2]2024[1][12]
Ownership and funding
Owned by Check Point Software Technologies since 2025[3][5]Owned by OpenAI[12]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
Not stated on its pages
  • March 9, 2026OpenAI agreed to buy Promptfoo, a startup helping businesses find and fix security issues in AI models during development.[13]
  • March 9, 2026OpenAI announced it has acquired Promptfoo, an AI security startup founded in 2024 to protect LLMs from adversarial attacks.[12]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Lakera describes organizations that run AI across employees, applications, and autonomous agents as the audience for its three AI security products. Lakera positions AI Agent Security for organizations that build and deploy agents. Lakera Guard is sold for LLM applications.Not written yet
Last verified
November 2, 2026November 4, 2026

Where they overlap

  • Lakera and Promptfoo are both filed under AI firewalls and guardrails and AI model and agent security.

Where they differ, field by field

  • Lakera's primary category is AI firewalls and guardrails; Promptfoo's is AI model and agent security.
  • Lakera is also filed under Workforce AI usage security. Promptfoo is also filed under Static application security testing and Breach simulation and automated pen-testing.
  • Lakera lists AI Red Teaming. Promptfoo lists Red Teaming and Evaluations.
  • Lakera is headquartered in Zurich, Switzerland. Promptfoo is headquartered in San Francisco, United States.
  • Lakera was founded in 2021. Promptfoo was founded in 2024.
  • Lakera is owned by Check Point Software Technologies, since 2025. Promptfoo is owned by OpenAI.

What it sells: Lakera

What AI Red Teaming does[1][5][6]
AI Red Teaming tests with prompt injection, jailbreaks, tool exploitation, and multi-turn attacks against real systems. AI Red Teaming provides exploit validation, severity scoring, and remediation guidance. AI Red Teaming is available for text, audio, image, and multi-modal systems.

What it sells: Promptfoo

What Red Teaming does[2][4][5]
Promptfoo creates thousands of context-aware attacks tailored to the customer's application. The open-source Community version includes up to 10k probes per month at no charge.
What Evaluations does[2][5]
Promptfoo's LLM evaluation can be integrated into a CircleCI pipeline. Promptfoo can be integrated with test frameworks like Jest and Vitest to evaluate prompts as part of existing testing and CI workflows. Promptfoo provides real-time alerts and automated evaluations to show LLM security status across all projects.

Questions about Lakera and Promptfoo

What do Lakera and Promptfoo sell?
Lakera sells AI Red Teaming. Promptfoo sells Red Teaming and Evaluations.
Are Lakera and Promptfoo in the same category?
They share AI firewalls and guardrails and AI model and agent security. Lakera's primary category is AI firewalls and guardrails and Promptfoo's is AI model and agent security.
Where are Lakera and Promptfoo headquartered?
Lakera is headquartered in Zurich, Switzerland. Promptfoo is headquartered in San Francisco, United States.
When were Lakera and Promptfoo founded?
Lakera was founded in 2021. Promptfoo was founded in 2024.
Who owns Lakera and Promptfoo?
Lakera is owned by Check Point Software Technologies, since 2025. Promptfoo is owned by OpenAI.
Who are Lakera and Promptfoo sold to?
Lakera describes organizations that run AI across employees, applications, and autonomous agents as the audience for its three AI security products.
What have Lakera and Promptfoo announced recently?
March 9, 2026: OpenAI agreed to buy Promptfoo, a startup helping businesses find and fix security issues in AI models during development.

About Lakera

Lakera sells AI Red Teaming, AI Agent Security and Workforce AI Security, which together help organizations secure employees, applications, and autonomous agents. Lakera states that its security prevents prompt injections, data leakage, and jailbreaks before they affect a business. Lakera directs its products at enterprise teams working with GenAI, agents, and MCPs. Lakera states that it is learning from 1M+ hackers around the world.[1][6][8]

AI Agent Security enforces security on every AI interaction an organization runs by inspecting what goes in, controlling what comes out, and governing what agents do. AI Agent Security provides visibility into agent usage and MCP-connected systems across an environment, including agents that teams did not explicitly build or register. AI Agent Security discovers AI agents and MCP-connected tools across an environment and identifies what data, APIs, and systems agents can access. Lakera says AI Agent Security protects agents across the full lifecycle, from discovery and risk assessment to runtime enforcement.[4][8]

AI Agent Security connects cloud, low-code, and custom environments. AI Agent Security assesses each agent based on its configuration, tools, data access, MCP servers, and autonomy. AI Agent Security enforces access controls and runtime guardrails to block threats, prevent data leakage, and govern live agent actions. AI Agent Security detects and blocks prompt attacks, data leakage, unsafe tool use, and unauthorized agent actions as agents operate. Lakera says AI Agent Security blocks indirect injection through connected tools before agents act on compromised instructions. AI Agent Security requires no changes to models or prompts. AI Agent Security extends the AI Defense Plane to the agents organizations build and deploy.[4][8]

AI Red Teaming gives teams a continuous workflow to evaluate, scan, and red team AI applications and agents. AI Red Teaming scoping maps AI architecture, workflows, tools, memory systems, and trust boundaries to build a targeted threat model and test plan. AI Red Teaming tests with prompt injection, jailbreaks, tool exploitation, and multi-turn attacks against real systems. AI Red Teaming provides exploit validation, severity scoring, and remediation guidance. AI Red Teaming is available for text, audio, image, and multi-modal systems. AI Red Teaming assessment covers goal hijacking, tool misuse, privilege escalation, indirect injection, and cascading failures. AI Red Teaming delivers validated vulnerabilities with reproduction steps, severity ratings, and affected workflows.[6]

Workforce AI Security discovers shadow AI, assesses risk, governs employee usage, and stops sensitive data exposure across AI apps, browser extensions, desktop agents, IDEs, and MCP-connected tools. Workforce AI Security covers the places employees prompt, paste, upload, and interact with AI day to day. Workforce AI Security extends visibility and policy enforcement from public chatbots to SaaS copilots to MCP-connected workflows. Workforce AI Security extends visibility into AI workflows where tools can access code, data, and enterprise systems.[1][7]

A Lakera report is based on a 30-day snapshot of production attack traffic observed by Lakera Guard. Lakera states that its security covers chatbots and audio bots across any model. Lakera states that policies can be customized to secure applications horizontally without changing code. Lakera describes Gandalf as an online game designed for learning about AI security.[1][10][11][12]

Dropbox uses AI Agent Security to help safeguard its LLM-powered applications. Lakera and Snyk have partnered on AI agent security research.[1][4][6][7][10]

Lakera on the record

Sources

Lakera full record

  1. [1]Lakera: The AI-Native Security Platform to Accelerate GenAILakera · undated page, accessed September 27, 2026 · Tier A
  2. [2]Check point acquires lakera to deliver end to end ai security for enterprisesCheck Point Software Technologies · checkpoint.com · published September 16, 2025 · Tier A
  3. [3]Check point software reports fourth quarter and 2025 full year resultsCheck Point Software Technologies · checkpoint.com · published February 12, 2026 · Tier A
  4. [4]AI Agent Security Overview | Check Point AI SecurityLakera documentation · undated page, accessed October 26, 2026 · Tier A
  5. [5]Workforce AI Security | Lakera, a Check Point CompanyLakera · undated page, accessed October 26, 2026 · Tier A
  6. [6]AI Red Teaming Services: Expert-led adversarial testingLakera · undated page, accessed October 26, 2026 · Tier A
  7. [7]AI Guardrails Dashboard | Check Point AI SecurityLakera documentation · undated page, accessed October 26, 2026 · Tier A
  8. [8]Secure AI Agents from Discovery to RuntimeLakera · undated page, accessed October 26, 2026 · Tier A
  9. [9]Lakera Launches Open-Source Security Benchmark for LLM Backends in AI AgentsBusiness Wire · published October 28, 2025 · Tier A
  10. [10]Product Peek: Introducing Lakera’s Advanced Content ModerationLakera · undated page, accessed November 10, 2026 · Tier A
  11. [11]Q4 2025 AI Agent Security TrendsLakera · undated page, accessed November 10, 2026 · Tier A
  12. [12]AI Security for Product Teams HandbookLakera · undated page, accessed November 10, 2026 · Tier A

Promptfoo full record

  1. [1]PressPromptfoo · promptfoo.dev · undated page, accessed November 4, 2026 · Tier A
  2. [2]promptfoo.devPromptfoo · promptfoo.dev · undated page, accessed November 4, 2026 · Tier A
  3. [3]About Promptfoo | AI Security Experts | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  4. [4]Build Secure AI Applications | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  5. [5]Pricing | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  6. [6]Setting up Promptfoo with CircleCI | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  7. [7]Testing prompts with Jest and Vitest | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  8. [8]Finding LLM Jailbreaks with Burp Suite | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  9. [9]SharePoint Integration | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  10. [10]Langfuse integration | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  11. [11]AI Security for Real Estate | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  12. [12]OpenAI acquires Promptfoo to secure its AI agents | TechCrunchTechCrunch · published March 9, 2026 · Tier B
  13. [13]OpenAI Buying AI Security Startup Promptfoo to Safeguard AI Agents - BloombergBloomberg · published March 9, 2026 · Tier B

Spot a factual error? Request a correction.