CISO Tribune

Vendor comparison · 2 companies

Promptfoo vs Socure

Promptfoo builds open-source tools for secure, reliable AI applications. Socure sells an identity and risk platform designed to make risk decisions in real time across the user journey. CISO Tribune files both under AI model and agent security. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Promptfoo
  • Socure
Promptfoo vs Socure: Products, Customers and Funding Compared
PromptfooPromptfoo builds open-source tools for secure, reliable AI applications.promptfoo.devSocureSocure sells an identity and risk platform designed to make risk decisions in real time across the user journey.socure.com
What it sells
  • Red Teaming[2][4][5]Simulates real users to uncover application-specific vulnerabilities.
  • Evaluations[2][5]LLM evaluation of prompts and models that can run inside CI workflows.
  • RiskOS[1][4][15]RiskOS is used to build a risk stack that covers fraud, compliance and trust.
  • Sigma First-Party Fraud[7]Sigma First-Party Fraud is used with cross-institution intelligence to expose hidden risk and stop abuse.
  • Socure Verify[1][8]Socure Verify automates the customer onboarding process.
  • Predictive DocV[1][9]Predictive DocV combines patented fake ID detection, biometric verification and Level 2 liveness.
  • Digital Intelligence[1][10]Digital Intelligence binds an identity with associated devices, online behavior and historical consumer interactions.
  • Global Watchlist Screening with Monitoring[13]Global Watchlist Screening with Monitoring uses AI and machine learning for matching and compliance processes.
Categories
Headquarters
San Francisco, United States[1][3]Not stated on its pages
Founded
2024[1][12]Not stated on its pages
Ownership and funding
Owned by OpenAI[12]Privately held[14][18]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • March 9, 2026OpenAI agreed to buy Promptfoo, a startup helping businesses find and fix security issues in AI models during development.[13]
  • March 9, 2026OpenAI announced it has acquired Promptfoo, an AI security startup founded in 2024 to protect LLMs from adversarial attacks.[12]
  • August 11, 2026Socure was named to the 2026 Inc. 5000 list of fastest growing private companies for the fifth consecutive year.[14]
  • June 25, 2026Socure appointed Mark Carter as its Chief Information Security Officer.[17]
  • May 7, 2026Socure appointed Chung-Man Tam as Chief Product Officer and Pablo Abreu as its first Chief AI and Innovation Officer.[16]
  • February 3, 2026Socure launched SocureGov RiskOS, a government-focused identity and fraud platform that is now FedRAMP Moderate authorized.[15]
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[18]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetFrom its own pages, Socure sells to customers whose problems range from workforce to prediction markets. Socure's cross-industry consortium data covers organizations across financial services, gaming and eCommerce. Graph Intelligence is aimed at fraud and data science teams. Digital Intelligence is aimed at financial institutions.
Last verified
November 4, 2026November 5, 2026

Where they overlap

  • Promptfoo and Socure are both filed under AI model and agent security.

Where they differ, field by field

  • Promptfoo's primary category is AI model and agent security; Socure's is Identity verification.
  • Promptfoo is also filed under AI firewalls and guardrails, Static application security testing and Breach simulation and automated pen-testing. Socure is also filed under Fraud prevention.
  • Promptfoo lists Red Teaming and Evaluations. Socure lists RiskOS, Sigma First-Party Fraud, Socure Verify, Predictive DocV, Digital Intelligence and 1 more.
  • Promptfoo is headquartered in San Francisco, United States.
  • Promptfoo was founded in 2024.
  • Promptfoo is owned by OpenAI. Socure is privately held.

What it sells: Promptfoo

What Red Teaming does[2][4][5]
Promptfoo creates thousands of context-aware attacks tailored to the customer's application. The open-source Community version includes up to 10k probes per month at no charge.
What Evaluations does[2][5]
Promptfoo's LLM evaluation can be integrated into a CircleCI pipeline. Promptfoo can be integrated with test frameworks like Jest and Vitest to evaluate prompts as part of existing testing and CI workflows. Promptfoo provides real-time alerts and automated evaluations to show LLM security status across all projects.

What it sells: Socure

What RiskOS does[1][4][15]
Socure Launch is a self-serve entry point into RiskOS. RiskOS includes a dynamic workflow builder with a no-code interface, third-party data integrations and real-time testing.
What Sigma First-Party Fraud does[7]
A dispute abuse model and real-time risk score identify identities likely to exploit dispute processes across organizations. Instant alerts are sent when a consumer's risk profile changes.
What Predictive DocV does[1][9]
Predictive Document Verification (DocV) 3.0 includes a capture experience, a forensic engine and data extraction. DocV can be combined with Socure's full stack of identity, fraud and compliance solutions.
What Digital Intelligence does[1][10]
Digital Intelligence can be integrated through a RESTful API interface and client-side SDKs for iOS, Android and JavaScript. Device intelligence gathers device attributes, history, velocity metrics and risk indicators to identify compromised devices, proxies, VPNs and more.
What Global Watchlist Screening with Monitoring does[13]
Customers can screen, monitor and disposition customers in real time against sanctions, enforcement lists, politically exposed persons databases, adverse media information and custom lists. All parties in a payment can be screened in a single API call in real time.

Questions about Promptfoo and Socure

What do Promptfoo and Socure sell?
Promptfoo sells Red Teaming and Evaluations. Socure sells RiskOS, Sigma First-Party Fraud, Socure Verify, Predictive DocV, Digital Intelligence and 1 more.
Are Promptfoo and Socure in the same category?
They share AI model and agent security. Promptfoo's primary category is AI model and agent security and Socure's is Identity verification.
Where are Promptfoo and Socure headquartered?
Promptfoo is headquartered in San Francisco, United States.
When were Promptfoo and Socure founded?
Promptfoo was founded in 2024.
Who owns Promptfoo and Socure?
Promptfoo is owned by OpenAI. Socure is privately held.
Who are Promptfoo and Socure sold to?
From its own pages, Socure sells to customers whose problems range from workforce to prediction markets.
What have Promptfoo and Socure announced recently?
March 9, 2026: OpenAI agreed to buy Promptfoo, a startup helping businesses find and fix security issues in AI models during development. August 11, 2026: Socure was named to the 2026 Inc. 5000 list of fastest growing private companies for the fifth consecutive year.

About Promptfoo

Promptfoo builds open-source tools for secure, reliable AI applications. Promptfoo is based in San Francisco, California, and is now part of OpenAI. Investors and operators backed Promptfoo early, and Promptfoo builds open-source, application-focused AI security.

Promptfoo's red teaming simulates real users to uncover application-specific vulnerabilities. Promptfoo creates thousands of context-aware attacks tailored to the customer's application. Promptfoo says its tests understand business logic, RAG, agents and integrations, and cover 50+ vulnerability types from injection to jailbreaks.[4]

Promptfoo connects to AI apps, agents, and workflows. Promptfoo provides remediation guidance directly in pull requests and developer workflows. Promptfoo lets teams track remediation progress and get suggested steps for each issue.[4][5]

The Community version includes all core features for local testing, evaluation, and vulnerability scanning. The open-source Community version includes up to 10k probes per month at no charge. Enterprise customers can purchase additional probes for larger scale testing. Enterprise pricing is customized based on a team's size and needs.[5]

Promptfoo lets customers manage LLM applications with teams-based access control and SSO, granular permission profiles, and customizable API access. Promptfoo provides real-time alerts and automated evaluations to show LLM security status across all projects. Promptfoo supports customizable plugin collections, scan configurations, and target settings that can be shared among colleagues.[5]

Promptfoo's LLM evaluation can be integrated into a CircleCI pipeline. Promptfoo can be integrated with test frameworks like Jest and Vitest to evaluate prompts as part of existing testing and CI workflows. Promptfoo's application-level jailbreak creation can be integrated with Burp Suite's Intruder feature for security testing of LLM-powered applications. Promptfoo can import eval test cases directly from Microsoft SharePoint CSV files using certificate-based authentication with Azure AD. Promptfoo configurations can reference prompts managed in Langfuse.[6][7][8][9][10]

Promptfoo offers real estate plugins that test every AI touchpoint, from property search to lending to advertising, across all 7 federally protected classes. Promptfoo tests AVM and appraisal AI for demographic correlation in valuations. Promptfoo's real estate testing covers home search assistants, neighborhood recommendation engines, property matching tools, and school district comparison features. Promptfoo's real estate testing can run entirely within a customer's infrastructure, with no applicant or transaction data leaving the environment. Promptfoo integrates with CI/CD pipelines to catch fair housing regressions before deployment. Promptfoo generates structured reports that map directly to Fair Housing Act and ECOA requirements.[11]

Promptfoo says its contributors are from companies like OpenAI, Google, Microsoft, and Amazon.[2][4][5][6][11]

Promptfoo on the record

Sources

Promptfoo full record

  1. [1]PressPromptfoo · promptfoo.dev · undated page, accessed November 4, 2026 · Tier A
  2. [2]promptfoo.devPromptfoo · promptfoo.dev · undated page, accessed November 4, 2026 · Tier A
  3. [3]About Promptfoo | AI Security Experts | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  4. [4]Build Secure AI Applications | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  5. [5]Pricing | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  6. [6]Setting up Promptfoo with CircleCI | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  7. [7]Testing prompts with Jest and Vitest | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  8. [8]Finding LLM Jailbreaks with Burp Suite | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  9. [9]SharePoint Integration | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  10. [10]Langfuse integration | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  11. [11]AI Security for Real Estate | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  12. [12]OpenAI acquires Promptfoo to secure its AI agents | TechCrunchTechCrunch · published March 9, 2026 · Tier B
  13. [13]OpenAI Buying AI Security Startup Promptfoo to Safeguard AI Agents - BloombergBloomberg · published March 9, 2026 · Tier B

Socure full record

  1. [1]socure.comSocure · socure.com · undated page, accessed November 5, 2026 · Tier A
  2. [2]Strategic growth investment fravity acquisitionSocure · socure.com · undated page, accessed November 5, 2026 · Tier A
  3. [3]Identity Verification Platform for AI Risk Decisioning | SocureSocure · undated page, accessed November 10, 2026 · Tier A
  4. [4]RiskOS®: Data Orchestration Platform & Risk Decisioning | SocureSocure · undated page, accessed November 10, 2026 · Tier A
  5. [5]Third-Party Fraud Detection Software | Sigma Identity Fraud V4.5Socure · undated page, accessed November 10, 2026 · Tier A
  6. [6]Synthetic Identity Fraud Detection | Sigma Synthetic V4.5 | SocureSocure · undated page, accessed November 10, 2026 · Tier A
  7. [7]Sigma First-Party Fraud Detection Software | SocureSocure · undated page, accessed November 10, 2026 · Tier A
  8. [8]KYC Verification Software | Socure VerifySocure · undated page, accessed November 10, 2026 · Tier A
  9. [9]Document Verification Software for Onboarding | SocureSocure · undated page, accessed November 10, 2026 · Tier A
  10. [10]Device Intelligence Software for Fraud Prevention | SocureSocure · undated page, accessed November 10, 2026 · Tier A
  11. [11]Identity Graph Intelligence: Actionable Insights for Fraud PreventionSocure · undated page, accessed November 10, 2026 · Tier A
  12. [12]Email Risk Score Software for Fraud Teams | SocureSocure · undated page, accessed November 10, 2026 · Tier A
  13. [13]Sanctions Screening Software for Compliance | SocureSocure · undated page, accessed November 10, 2026 · Tier A
  14. [14]Socure Named to Inc. 5000 for Fifth Consecutive YearSocure · published August 11, 2026 · Tier A
  15. [15]Socure Launches SocureGov RiskOS® for Government FraudSocure · published February 3, 2026 · Tier A
  16. [16]Socure Names New CPO and Chief AI OfficerSocure · published May 7, 2026 · Tier A
  17. [17]Socure Reinforces Security-First Strategy with Chief Information Security Officer AppointmentBusiness Wire · published June 25, 2026 · Tier A
  18. [18]RiskOS - Socure ReviewsG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.