Home/Compare/vigil-llm vs promptfoo

Comparison

vigil-llm vs promptfoo

Verdict

Pick vigil-llm if vigil-llm is designed for users who need robust security measures to protect against prompt injections and jailbreak attempts in LLMs; pick promptfoo if promptfoo is a TypeScript-based tool for evaluating and testing prompts, AI agents, and retrieval-augmented generation systems. It supports red teaming and vulnerability scanning for AI models, with CI/CD integration.

Markdown twin · vigil-llm alternatives · promptfoo alternatives

GraphCanon updated Sep 20, 2026

11views this month

vigil-llm logo

vigil-llm

deadbits/vigil-llm

★ 496pushed Jan 31, 2024
vs
promptfoo logo

promptfoo

promptfoo/promptfoo

★ 25kpushed Sep 18, 2026

Trust & integrity

Signalvigil-llmpromptfoo
Maintenance
Dormant (962d since push)
As of Sep 20, 2026 · github_public_v1
Very active (0d since push)
As of Sep 18, 2026 · github_public_v1
Provenance
Not a fork · Personal account
As of Sep 20, 2026 · github_public_v1
Not a fork · Organization account
As of Sep 18, 2026 · github_public_v1
OSV dependency advisories
No lockfile (source not queried)
As of Jul 11, 2026 · osv@v1
No lockfile (source not queried)
As of Sep 18, 2026 · osv@v1
deps.dev advisories
Not queried
deps.dev@v1
Not queried
deps.dev@v1
OpenSSF Scorecard
Not queried
openssf-scorecard@v1
Not queried
openssf-scorecard@v1

Tagline

vigil-llm
Detect prompt injections and other risky inputs in LLMs
promptfoo
Test prompts, agents, and RAGs. Compare performance of various LLMs.

Stars

vigil-llm
496
promptfoo
25k

Forks

vigil-llm
56
promptfoo
2.3k

Open issues

vigil-llm
16
promptfoo
631

Language

vigil-llm
Python
promptfoo
TypeScript

Adopt for

vigil-llm
Vigil-llm is designed for users who need robust security measures to protect against prompt injections and jailbreak attempts in LLMs.
promptfoo
Promptfoo is a TypeScript-based tool for evaluating and testing prompts, AI agents, and retrieval-augmented generation systems. It supports red teaming and vulnerability scanning for AI models, with CI/CD integration.

Persona

vigil-llm
-
promptfoo
-

Runtime

vigil-llm
-
promptfoo
-

License

vigil-llm
Apache-2.0
promptfoo
MIT

Last pushed

vigil-llm
Jan 31, 2024
promptfoo
Sep 18, 2026

Categories

vigil-llm
Evaluation & Observability
promptfoo
Evaluation & Observability

Trust and health

Maintenance

vigil-llm
Dormant (18%)
promptfoo
Very active (96%)

Days since push

vigil-llm
962d
promptfoo
0d

Open issues (now)

vigil-llm
16
promptfoo
631

Stars delta

vigil-llm
+5 (30d)
promptfoo
+1.4k (30d)

Open issues delta

vigil-llm
0 (30d)
promptfoo
+150 (30d)

Owner type

vigil-llm
User
promptfoo
Organization

Full report

vigil-llm
Trust report
promptfoo
Trust report

Typed relationship

vigil-llm alternative promptfoo`Vigil` and `PromptFoo` both evaluate LLM inputs, but they do so from different perspectives: security vs. quality/red-teaming.

Shared compatibility

  • Python · vigil-llm: Python runtime · promptfoo: Python runtime

Choose vigil-llm if…

  • vigil-llm is primarily Python; promptfoo is TypeScript.
  • License: vigil-llm is Apache-2.0, promptfoo is MIT.
  • `Vigil` and `PromptFoo` both evaluate LLM inputs, but they do so from different perspectives: security vs. quality/red-teaming.
  • Tags unique to vigil-llm: adversarial-attacks, large-language-models, llm-security, prompt-injection.
  • When deploying large language models that require high levels of input security, vigil-llm can be employed to detect maliciously crafted inputs intended to manipulate model behavior.

When NOT to use vigil-llm

  • If your application does not require high security against malicious inputs or if the risks of prompt injection are minimal due to controlled input sources, vigil-llm might be unnecessary.
  • For projects that focus on optimizing output speed rather than input robustness, other tools might be more appropriate as vigil-llm could add significant processing overhead.

Choose promptfoo if…

  • promptfoo is primarily TypeScript; vigil-llm is Python.
  • License: promptfoo is MIT, vigil-llm is Apache-2.0.
  • Requirements: Requires Node.js >=22.22.0, with Node.js 24 LTS recommended.; API keys for most LLM providers are required and should be set as environment variables..
  • `Vigil` and `PromptFoo` both evaluate LLM inputs, but they do so from different perspectives: security vs. quality/red-teaming.
  • Tags unique to promptfoo: ci, ci-cd, cicd, evaluation.
  • When you need to compare the performance of various LLMs such as GPT, Claude, Gemini, DeepSeek, and more.

When NOT to use promptfoo

  • If you are working with languages other than TypeScript, as Promptfoo is specifically designed for TypeScript environments.
  • When you do not need to compare multiple LLMs and only require a simple prompt testing tool without advanced features like red teaming.

Explore

Sources

Every stat on this page traces to a dated GitHub sync, license file, enrichment field, or trust scan.

GitHub stars on cards: vigil-llm 496 · promptfoo 25k (synced Sep 20, 2026).

Common questions

What is the difference between vigil-llm and promptfoo?
vigil-llm: Detect prompt injections and other risky inputs in LLMs. promptfoo: Test prompts, agents, and RAGs. Compare performance of various LLMs.. See the comparison table for live GitHub stats and shared categories.
When should I choose vigil-llm over promptfoo?
Choose vigil-llm over promptfoo when vigil-llm is primarily Python; promptfoo is TypeScript; License: vigil-llm is Apache-2.0, promptfoo is MIT; Vigil and PromptFoo both evaluate LLM inputs, but they do so from different perspectives: security vs. quality/red-teaming; Tags unique to vigil-llm: adversarial-attacks, large-language-models, llm-security, prompt-injection; When deploying large language models that require high levels of input security, vigil-llm can be employed to detect maliciously crafted inputs intended to manipulate model behavior.
When should I choose promptfoo over vigil-llm?
Choose promptfoo over vigil-llm when promptfoo is primarily TypeScript; vigil-llm is Python; License: promptfoo is MIT, vigil-llm is Apache-2.0; Requirements: Requires Node.js >=22.22.0, with Node.js 24 LTS recommended.; API keys for most LLM providers are required and should be set as environment variables.; Vigil and PromptFoo both evaluate LLM inputs, but they do so from different perspectives: security vs. quality/red-teaming; Tags unique to promptfoo: ci, ci-cd, cicd, evaluation; When you need to compare the performance of various LLMs such as GPT, Claude, Gemini, DeepSeek, and more.
When should I avoid vigil-llm?
If your application does not require high security against malicious inputs or if the risks of prompt injection are minimal due to controlled input sources, vigil-llm might be unnecessary. For projects that focus on optimizing output speed rather than input robustness, other tools might be more appropriate as vigil-llm could add significant processing overhead.
When should I avoid promptfoo?
If you are working with languages other than TypeScript, as Promptfoo is specifically designed for TypeScript environments. When you do not need to compare multiple LLMs and only require a simple prompt testing tool without advanced features like red teaming.
Is vigil-llm or promptfoo more popular on GitHub?
promptfoo has more GitHub stars (25,251 vs 496). Stars measure visibility, not whether either tool fits your constraints.
Are vigil-llm and promptfoo open source?
Yes - both are open-source projects on GitHub (vigil-llm: Apache-2.0, promptfoo: MIT).
Where can I find alternatives to vigil-llm or promptfoo?
GraphCanon lists graph-backed alternatives at vigil-llm alternatives and promptfoo alternatives (vigil-llm markdown twin, promptfoo markdown twin), ranked by typed relationship edges rather than popularity votes.
Is there a machine-readable version of this comparison?
Yes. The markdown twin at this comparison mirrors this page for agents and LLM crawlers, with the same stats table and FAQ answers.
Which is better maintained, vigil-llm or promptfoo?
vigil-llm: Dormant. promptfoo: Very active. Compare maintenance labels, days since push, and release cadence in the trust section below - stars alone do not measure maintenance.
Where are the full trust reports for vigil-llm and promptfoo?
GraphCanon publishes per-repo trust reports with dated maintenance, provenance, and scan summaries: vigil-llm trust report; promptfoo trust report.

Was this helpful?

Anonymous feedback helps us improve pages and translations.