CISO Tribune

Vendor comparison · 2 companies

Mindgard vs Promptfoo

Mindgard secures AI models, agents, and applications against exploitable threats. Promptfoo builds open-source tools for secure, reliable AI applications. CISO Tribune files both under AI model and agent security and AI firewalls and guardrails. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Mindgard
  • Promptfoo
Mindgard vs Promptfoo: Products, Customers and Funding Compared
MindgardMindgard secures AI models, agents, and applications against exploitable threats.mindgard.aiPromptfooPromptfoo builds open-source tools for secure, reliable AI applications.promptfoo.dev
What it sells
  • AI Red Teaming[1][4][6][10]Mindgard's agentic platform red teams AI systems, agents, and infrastructure.
  • AI Security Expert[9]A subscription that gives a team direct access to a specialist.
  • Red Teaming[2][4][5]Simulates real users to uncover application-specific vulnerabilities.
  • Evaluations[2][5]LLM evaluation of prompts and models that can run inside CI workflows.
Categories
Headquarters
Boston, United States[2]San Francisco, United States[1][3]
Founded
2022[2][3]2024[1][12]
Ownership and funding
Privately held[2][3]Owned by OpenAI[12]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • August 13, 2026Mindgard announced a $30M Series A funding round.[11]
  • March 17, 2026Mindgard announced an expansion of its AI security platform that adds a reconnaissance capability for AI models, agents and applications.[12]
  • March 9, 2026OpenAI agreed to buy Promptfoo, a startup helping businesses find and fix security issues in AI models during development.[13]
  • March 9, 2026OpenAI announced it has acquired Promptfoo, an AI security startup founded in 2024 to protect LLMs from adversarial attacks.[12]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Mindgard addresses organizations that secure the AI systems they build, buy and use. The offering is aimed at pen-testers who scale AI-focused security testing efforts, and at developers who integrate ongoing testing for secure AI deployments. Customer types shown include global insurance brokerages, healthcare AI platforms, global financial institutions, semiconductor manufacturers and enterprise technology services. Reporting is directed to security, engineering, GRC, and audit teams.Not written yet
Last verified
September 27, 2026November 4, 2026

Where they overlap

  • AI model and agent security is the primary category of both Mindgard and Promptfoo; both are also filed under AI firewalls and guardrails.
  • Both are headquartered in the United States.

Where they differ, field by field

  • Promptfoo is also filed under Static application security testing and Breach simulation and automated pen-testing.
  • Mindgard lists AI Red Teaming and AI Security Expert. Promptfoo lists Red Teaming and Evaluations.
  • Mindgard is headquartered in Boston, United States. Promptfoo is headquartered in San Francisco, United States.
  • Mindgard was founded in 2022. Promptfoo was founded in 2024.
  • Mindgard is privately held. Promptfoo is owned by OpenAI.

How they differ

CISO Tribune files both Mindgard and Promptfoo under AI model and agent security as the primary category, and both also appear under AI firewalls and guardrails. CISO Tribune additionally files Promptfoo under static application security testing and breach simulation and automated pen-testing. Mindgard sells AI Red Teaming, where its agentic platform red teams AI systems, agents, and infrastructure. Promptfoo sells Red Teaming that simulates real users to uncover application-specific vulnerabilities, along with Evaluations that can run inside CI workflows. Mindgard also sells an AI Security Expert subscription that gives a team direct access to a specialist, and a Technical Account Manager as an annual subscription. Promptfoo's open-source Community version includes up to 10k probes per month at no charge, and enterprise customers can purchase additional probes.

Mindgard is headquartered in Boston and was founded in 2022, and it is privately held. On August 13, 2026, Mindgard announced a $30M Series A funding round. Promptfoo is headquartered in San Francisco and was founded in 2024, and it is owned by OpenAI. On March 9, 2026, OpenAI announced it had acquired Promptfoo.

Mindgard names customer types including global insurance brokerages, healthcare AI platforms, global financial institutions, and semiconductor manufacturers. On March 17, 2026, Mindgard announced an expansion of its AI security platform that adds a reconnaissance capability for AI models, agents and applications. Promptfoo offers real estate plugins and says its tests cover 50+ vulnerability types. Promptfoo can be integrated with a CircleCI pipeline, while Mindgard deploys through CI/CD or Burp Suite.

What it sells: Mindgard

What AI Security Expert does[9]
The expert shows how to run posture assessments, enhance tooling usage, build adversarial skills, and co-pilot red teaming efforts. The subscription includes workshops that show security and data science teams how adversarial techniques work, how agentic systems fail, and how defensive controls can be applied.

What it sells: Promptfoo

What Red Teaming does[2][4][5]
Promptfoo creates thousands of context-aware attacks tailored to the customer's application. The open-source Community version includes up to 10k probes per month at no charge.
What Evaluations does[2][5]
Promptfoo's LLM evaluation can be integrated into a CircleCI pipeline. Promptfoo can be integrated with test frameworks like Jest and Vitest to evaluate prompts as part of existing testing and CI workflows. Promptfoo provides real-time alerts and automated evaluations to show LLM security status across all projects.

Questions about Mindgard and Promptfoo

What do Mindgard and Promptfoo sell?
Mindgard sells AI Red Teaming and AI Security Expert. Promptfoo sells Red Teaming and Evaluations.
Are Mindgard and Promptfoo in the same category?
Yes. AI model and agent security is the primary category of both on CISO Tribune.
Where are Mindgard and Promptfoo headquartered?
Mindgard is headquartered in Boston, United States. Promptfoo is headquartered in San Francisco, United States.
When were Mindgard and Promptfoo founded?
Mindgard was founded in 2022. Promptfoo was founded in 2024.
Who owns Mindgard and Promptfoo?
Mindgard is privately held. Promptfoo is owned by OpenAI.
Who are Mindgard and Promptfoo sold to?
Mindgard addresses organizations that secure the AI systems they build, buy and use.
What have Mindgard and Promptfoo announced recently?
August 13, 2026: Mindgard announced a $30M Series A funding round. March 9, 2026: OpenAI agreed to buy Promptfoo, a startup helping businesses find and fix security issues in AI models during development.

About Mindgard

Mindgard secures AI models, agents, and applications against exploitable threats. Mindgard combines offensive security expertise, AI red teaming, attacker intelligence, and automated protection to help organizations discover, assess, and mitigate risk across AI models, agents, and applications. Mindgard was created from more than a decade of AI security research at Lancaster University. Mindgard was founded on pioneering research by Dr. Peter Garraghan at Lancaster University, which showed traditional AppSec could not address AI-specific risks. Mindgard's research has produced 150+ publicly disclosed AI vulnerabilities.[1][5]

The Mindgard AI security platform finds, validates, and fixes high-impact AI vulnerabilities. Mindgard operates as an autonomous red teamer, continuously mapping, planning, and executing complex, agentic attack workflows. Mindgard profiles AI systems the way attackers do, mapping models, agents, tools, and behaviors before attack execution. Mindgard automates recon and intelligence gathering on AI systems before adversarial testing to discover instructions, tools, and behaviors attackers can exploit. Mindgard identifies AI models, agents, MCP/A2A servers, connected tools, and shadow AI within products. Mindgard tests AI applications, agents and LLMs, including image, audio and multi-modal models. Mindgard uses reconnaissance and agentic attacks to identify how an attacker could manipulate an agent, access sensitive information, misuse tools, bypass controls, or chain weaknesses together.[1][4][13]

Mindgard validates which weaknesses are exploitable, explains their potential impact, and provides evidence and guidance to help teams close them. AI guardrails and firewalls apply policies to prompts, responses, or actions at runtime, and Mindgard tests whether those controls actually work. Mindgard assesses agents, tools, permissions, APIs, data, and infrastructure beyond the prompt layer. Mindgard evaluates and strengthens AI guardrails and WAF solutions against vulnerabilities.[1][13]

Mindgard deploys through CI/CD, Burp Suite, or a single click. Mindgard integrates into existing workflows with CI/CD automation and a Burp Suite extension. Mindgard uses APIs and integrations to secure models, agents, and AI applications across development and production environments. Mindgard routes findings through APIs, CI/CD, and enterprise workflow integrations into existing security tooling, ticketing systems, and engineering workflows. Mindgard integrates report viewing into existing systems and SIEM. Mindgard supports SAML/SSO, SCIM provisioning, and RBAC to align security testing with organizational compliance standards.[1][4][13][14][15]

Mindgard generates evidence, remediation guidance, and audit-ready reports mapped to OWASP, MITRE, NIST, and AIUC-1. Mindgard discovers and inventories AI applications, models, agents, and shadow AI across an entire environment. Mindgard prioritizes findings by severity, exposure, affected target, business context, and urgency of remediation. Mindgard gives security, engineering, GRC, and audit teams reporting they can use to demonstrate that AI risks and controls are being continuously evaluated. Security teams use Mindgard to discover and remediate high impact risk.[4][15]

Mindgard researchers attack AI systems the way a motivated adversary would, using prompt injection, agent hijacking, tool abuse, data extraction and guardrail bypass, chained into attack paths. Mindgard red teams the whole AI system, not just the model. A single LLM application typically takes two to three weeks from kickoff to report in a Mindgard AI pentest. Mindgard sells a dedicated Technical Account Manager as an annual subscription. Mindgard's AI Security Expert subscription gives a team direct access to a specialist. Mindgard training includes instructor-led workshops where teams build agents, test attacks, configure guardrails, and harden defenses.[6][7][8][9][10][13]

A US insurance brokerage used Mindgard to secure nine production AI models. Mindgard secured Fortune 500 design partners. Mindgard expanded its leadership with CEO James Brear, Head of Research Aaron Portnoy, and Offensive Security Lead Rich Smith. Mindgard lists SOC 2 Type 2. Mindgard says 86% of its staff are on the R&D team and 38% hold PhDs.[1][5][6][7][8][9][10][13][14]

Mindgard on the record

Sources

Mindgard full record

  1. [1]Mindgard - AI Red Teaming & AI Security SolutionsMindgard · undated page, accessed September 27, 2026 · Tier A
  2. [2]About Mindgard: Offensive AI Security CompanyMindgard · undated page, accessed September 27, 2026 · Tier A
  3. [3]Mindgard raises 30 million to protect ai systemsSecurityWeek · securityweek.com · published August 12, 2026 · Tier B
  4. [4]AI Security Software: Advanced AI Testing Tools - MindgardMindgard · undated page, accessed October 26, 2026 · Tier A
  5. [5]AI Security Services: Secure Agentic AI Systems - MindgardMindgard · undated page, accessed October 26, 2026 · Tier A
  6. [6]AI Red Teaming Services for LLMs and Agents - MindgardMindgard · undated page, accessed October 26, 2026 · Tier A
  7. [7]AI Penetration TestingMindgard · undated page, accessed October 26, 2026 · Tier A
  8. [8]AI Security Advisory Services for Enterprise AI - MindgardMindgard · undated page, accessed October 26, 2026 · Tier A
  9. [9]AI Security Consulting Services for Enterprise AI - MindgardMindgard · undated page, accessed October 26, 2026 · Tier A
  10. [10]AI Security TrainingMindgard · undated page, accessed October 26, 2026 · Tier A
  11. [11]Mindgard Raises $30M Series AMindgard · published August 13, 2026 · Tier A
  12. [12]Mindgard Unveils First Autonomous AI Security Platform To Identify And Fix Exploitable VulnerabilitiesBusiness Wire · published March 17, 2026 · Tier A
  13. [13]Offensive Security Tool for AI Systems - MindgardMindgard · undated page, accessed November 10, 2026 · Tier A
  14. [14]Mindgard vs Prompt SecurityMindgard · undated page, accessed November 10, 2026 · Tier A
  15. [15]AI Governance & ComplianceMindgard · undated page, accessed November 10, 2026 · Tier A

Promptfoo full record

  1. [1]PressPromptfoo · promptfoo.dev · undated page, accessed November 4, 2026 · Tier A
  2. [2]promptfoo.devPromptfoo · promptfoo.dev · undated page, accessed November 4, 2026 · Tier A
  3. [3]About Promptfoo | AI Security Experts | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  4. [4]Build Secure AI Applications | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  5. [5]Pricing | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  6. [6]Setting up Promptfoo with CircleCI | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  7. [7]Testing prompts with Jest and Vitest | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  8. [8]Finding LLM Jailbreaks with Burp Suite | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  9. [9]SharePoint Integration | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  10. [10]Langfuse integration | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  11. [11]AI Security for Real Estate | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  12. [12]OpenAI acquires Promptfoo to secure its AI agents | TechCrunchTechCrunch · published March 9, 2026 · Tier B
  13. [13]OpenAI Buying AI Security Startup Promptfoo to Safeguard AI Agents - BloombergBloomberg · published March 9, 2026 · Tier B

Spot a factual error? Request a correction.