CISO Tribune

Vendor comparison · 2 companies

Promptfoo vs WitnessAI

Promptfoo builds open-source tools for secure, reliable AI applications. WitnessAI sells an AI security and governance platform that brings humans and agents under one platform. CISO Tribune files both under AI firewalls and guardrails. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Promptfoo
  • WitnessAI
Promptfoo vs WitnessAI: Products, Customers and Funding Compared
PromptfooPromptfoo builds open-source tools for secure, reliable AI applications.promptfoo.devWitnessAIWitnessAI sells an AI security and governance platform that brings humans and agents under one platform.witness.ai
What it sells
  • Red Teaming[2][4][5]Simulates real users to uncover application-specific vulnerabilities.
  • Evaluations[2][5]LLM evaluation of prompts and models that can run inside CI workflows.
  • Observe[6][11]Finds and catalogs AI applications, agents and MCP servers, and visualizes AI conversations and agentic activity.
  • Control[1][5][6][7][10][11]Governs what AI agents and employees can do, routes prompts to models based on risk or purpose, and generates audit trails.
  • Protect[1][5][6][8][11]Applies runtime security controls and content guardrails intended to block prompt injection and jailbreak attempts and filter harmful responses.
Categories
Headquarters
San Francisco, United States[1][3]Mountain View, United States[4]
Founded
2024[1][12]2023[3]
Ownership and funding
Owned by OpenAI[12]Privately held[2][13]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • March 9, 2026OpenAI agreed to buy Promptfoo, a startup helping businesses find and fix security issues in AI models during development.[13]
  • March 9, 2026OpenAI announced it has acquired Promptfoo, an AI security startup founded in 2024 to protect LLMs from adversarial attacks.[12]
Not stated on its pages
G2 and Gartner Peer Insights
  • G2: Not stated on its pages
  • Gartner Peer Insights: Not stated on its pages
  • G2: listed, seen November 10, 2026[13]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetFrom its own pages, the company sells mainly to enterprises, saying they need security and governance that extends from humans to agents. It addresses employee use of AI, citing risks around sensitive data, compliance, and shadow AI. It also addresses AI agents, which it describes as connecting to tools, accessing data, and taking actions on behalf of employees.
Last verified
November 4, 2026November 2, 2026

Where they overlap

  • Promptfoo and WitnessAI are both filed under AI firewalls and guardrails.
  • Both are headquartered in the United States.

Where they differ, field by field

  • Promptfoo's primary category is AI model and agent security; WitnessAI's is Workforce AI usage security.
  • Promptfoo is also filed under Static application security testing and Breach simulation and automated pen-testing. WitnessAI is also filed under AI governance.
  • Promptfoo lists Red Teaming and Evaluations. WitnessAI lists Observe, Control and Protect.
  • Promptfoo is headquartered in San Francisco, United States. WitnessAI is headquartered in Mountain View, United States.
  • Promptfoo was founded in 2024. WitnessAI was founded in 2023.
  • Promptfoo is owned by OpenAI. WitnessAI is privately held.

What it sells: Promptfoo

What Red Teaming does[2][4][5]
Promptfoo creates thousands of context-aware attacks tailored to the customer's application. The open-source Community version includes up to 10k probes per month at no charge.
What Evaluations does[2][5]
Promptfoo's LLM evaluation can be integrated into a CircleCI pipeline. Promptfoo can be integrated with test frameworks like Jest and Vitest to evaluate prompts as part of existing testing and CI workflows. Promptfoo provides real-time alerts and automated evaluations to show LLM security status across all projects.

Questions about Promptfoo and WitnessAI

What do Promptfoo and WitnessAI sell?
Promptfoo sells Red Teaming and Evaluations. WitnessAI sells Observe, Control and Protect.
Are Promptfoo and WitnessAI in the same category?
They share AI firewalls and guardrails. Promptfoo's primary category is AI model and agent security and WitnessAI's is Workforce AI usage security.
Where are Promptfoo and WitnessAI headquartered?
Promptfoo is headquartered in San Francisco, United States. WitnessAI is headquartered in Mountain View, United States.
When were Promptfoo and WitnessAI founded?
Promptfoo was founded in 2024. WitnessAI was founded in 2023.
Who owns Promptfoo and WitnessAI?
Promptfoo is owned by OpenAI. WitnessAI is privately held.
Who are Promptfoo and WitnessAI sold to?
From its own pages, the company sells mainly to enterprises, saying they need security and governance that extends from humans to agents.
What have Promptfoo and WitnessAI announced recently?
March 9, 2026: OpenAI agreed to buy Promptfoo, a startup helping businesses find and fix security issues in AI models during development.

About Promptfoo

Promptfoo builds open-source tools for secure, reliable AI applications. Promptfoo is based in San Francisco, California, and is now part of OpenAI. Investors and operators backed Promptfoo early, and Promptfoo builds open-source, application-focused AI security.

Promptfoo's red teaming simulates real users to uncover application-specific vulnerabilities. Promptfoo creates thousands of context-aware attacks tailored to the customer's application. Promptfoo says its tests understand business logic, RAG, agents and integrations, and cover 50+ vulnerability types from injection to jailbreaks.[4]

Promptfoo connects to AI apps, agents, and workflows. Promptfoo provides remediation guidance directly in pull requests and developer workflows. Promptfoo lets teams track remediation progress and get suggested steps for each issue.[4][5]

The Community version includes all core features for local testing, evaluation, and vulnerability scanning. The open-source Community version includes up to 10k probes per month at no charge. Enterprise customers can purchase additional probes for larger scale testing. Enterprise pricing is customized based on a team's size and needs.[5]

Promptfoo lets customers manage LLM applications with teams-based access control and SSO, granular permission profiles, and customizable API access. Promptfoo provides real-time alerts and automated evaluations to show LLM security status across all projects. Promptfoo supports customizable plugin collections, scan configurations, and target settings that can be shared among colleagues.[5]

Promptfoo's LLM evaluation can be integrated into a CircleCI pipeline. Promptfoo can be integrated with test frameworks like Jest and Vitest to evaluate prompts as part of existing testing and CI workflows. Promptfoo's application-level jailbreak creation can be integrated with Burp Suite's Intruder feature for security testing of LLM-powered applications. Promptfoo can import eval test cases directly from Microsoft SharePoint CSV files using certificate-based authentication with Azure AD. Promptfoo configurations can reference prompts managed in Langfuse.[6][7][8][9][10]

Promptfoo offers real estate plugins that test every AI touchpoint, from property search to lending to advertising, across all 7 federally protected classes. Promptfoo tests AVM and appraisal AI for demographic correlation in valuations. Promptfoo's real estate testing covers home search assistants, neighborhood recommendation engines, property matching tools, and school district comparison features. Promptfoo's real estate testing can run entirely within a customer's infrastructure, with no applicant or transaction data leaving the environment. Promptfoo integrates with CI/CD pipelines to catch fair housing regressions before deployment. Promptfoo generates structured reports that map directly to Fair Housing Act and ECOA requirements.[11]

Promptfoo says its contributors are from companies like OpenAI, Google, Microsoft, and Amazon.[2][4][5][6][11]

Promptfoo on the record

Sources

Promptfoo full record

  1. [1]PressPromptfoo · promptfoo.dev · undated page, accessed November 4, 2026 · Tier A
  2. [2]promptfoo.devPromptfoo · promptfoo.dev · undated page, accessed November 4, 2026 · Tier A
  3. [3]About Promptfoo | AI Security Experts | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  4. [4]Build Secure AI Applications | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  5. [5]Pricing | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  6. [6]Setting up Promptfoo with CircleCI | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  7. [7]Testing prompts with Jest and Vitest | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  8. [8]Finding LLM Jailbreaks with Burp Suite | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  9. [9]SharePoint Integration | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  10. [10]Langfuse integration | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  11. [11]AI Security for Real Estate | PromptfooPromptfoo · undated page, accessed November 10, 2026 · Tier A
  12. [12]OpenAI acquires Promptfoo to secure its AI agents | TechCrunchTechCrunch · published March 9, 2026 · Tier B
  13. [13]OpenAI Buying AI Security Startup Promptfoo to Safeguard AI Agents - BloombergBloomberg · published March 9, 2026 · Tier B

WitnessAI full record

  1. [1]Unified AI Security and Governance Platform | WitnessAIWitnessAI · undated page, accessed September 27, 2026 · Tier A
  2. [2]Witnessai raises 58 million for global expansion and announces new ways to secure ai agents 302659319WitnessAI via PR Newswire · prnewswire.com · published January 13, 2026 · Tier A
  3. [3]Witnessai launches with guardrails for aiDark Reading · darkreading.com · published May 21, 2024 · Tier B
  4. [4]WitnessaiAppSec Santa · appsecsanta.com · published April 3, 2026 · Tier C
  5. [5]Scaling AI Security with WitnessAI - WitnessAIWitnessAI · undated page, accessed November 10, 2026 · Tier A
  6. [6]AI Security Platform | Enterprise AI Governance | WitnessAIWitnessAI · undated page, accessed November 10, 2026 · Tier A
  7. [7]WitnessAI 2.0 Delivers New Regulatory Compliance Capabilities to Support Safe AI Adoption - WitnessAIWitnessAI · published April 30, 2025 · Tier A
  8. [8]Ensuring Compliance with the EU AI Act - WitnessAIWitnessAI · undated page, accessed November 10, 2026 · Tier A
  9. [9]WitnessAI Achieves SOC 2 Type II Compliance - WitnessAIWitnessAI · published October 21, 2025 · Tier A
  10. [10]WitnessAI Joins ServiceNow Control Tower Alliance - WitnessAIWitnessAI · undated page, accessed November 10, 2026 · Tier A
  11. [11]TENEX.AI and WitnessAI Partner to Deliver Managed Security and Compliance Services for Enterprise AI - WitnessAIWitnessAI · published June 17, 2025 · Tier A
  12. [12]How Security Leaders Prove ROI and Reduce Risk - WitnessAIWitnessAI · undated page, accessed November 10, 2026 · Tier A
  13. [13]WitnessAI Reviews 2026: Details, Pricing, & FeaturesG2 · undated page, accessed November 10, 2026 · Tier C

Spot a factual error? Request a correction.