Comparison
vigil-llm vs promptfoo
Verdict
Pick vigil-llm if vigil-llm is designed for users who need robust security measures to protect against prompt injections and jailbreak attempts in LLMs; pick promptfoo if promptfoo is a TypeScript-based tool for evaluating and testing prompts, AI agents, and retrieval-augmented generation systems. It supports red teaming and vulnerability scanning for AI models, with CI/CD integration.
Markdown twin · vigil-llm alternatives · promptfoo alternatives
GraphCanon updated Sep 20, 2026
11views this month
Trust & integrity
| Signal | vigil-llm | promptfoo |
|---|---|---|
| Maintenance | Dormant (962d since push) As of Sep 20, 2026 · github_public_v1 | Very active (0d since push) As of Sep 18, 2026 · github_public_v1 |
| Provenance | Not a fork · Personal account As of Sep 20, 2026 · github_public_v1 | Not a fork · Organization account As of Sep 18, 2026 · github_public_v1 |
| OSV dependency advisories | No lockfile (source not queried) As of Jul 11, 2026 · osv@v1 | No lockfile (source not queried) As of Sep 18, 2026 · osv@v1 |
| deps.dev advisories | Not queried deps.dev@v1 | Not queried deps.dev@v1 |
| OpenSSF Scorecard | Not queried openssf-scorecard@v1 | Not queried openssf-scorecard@v1 |
Tagline
- vigil-llm
- Detect prompt injections and other risky inputs in LLMs
- promptfoo
- Test prompts, agents, and RAGs. Compare performance of various LLMs.
Stars
- vigil-llm
- 496
- promptfoo
- 25k
Forks
- vigil-llm
- 56
- promptfoo
- 2.3k
Open issues
- vigil-llm
- 16
- promptfoo
- 631
Language
- vigil-llm
- Python
- promptfoo
- TypeScript
Adopt for
- vigil-llm
- Vigil-llm is designed for users who need robust security measures to protect against prompt injections and jailbreak attempts in LLMs.
- promptfoo
- Promptfoo is a TypeScript-based tool for evaluating and testing prompts, AI agents, and retrieval-augmented generation systems. It supports red teaming and vulnerability scanning for AI models, with CI/CD integration.
Persona
- vigil-llm
- -
- promptfoo
- -
Runtime
- vigil-llm
- -
- promptfoo
- -
License
- vigil-llm
- Apache-2.0
- promptfoo
- MIT
Last pushed
- vigil-llm
- Jan 31, 2024
- promptfoo
- Sep 18, 2026
Categories
- vigil-llm
- Evaluation & Observability
- promptfoo
- Evaluation & Observability
Trust and health
Maintenance
- vigil-llm
- Dormant (18%)
- promptfoo
- Very active (96%)
Days since push
- vigil-llm
- 962d
- promptfoo
- 0d
Open issues (now)
- vigil-llm
- 16
- promptfoo
- 631
Stars delta
- vigil-llm
- +5 (30d)
- promptfoo
- +1.4k (30d)
Open issues delta
- vigil-llm
- 0 (30d)
- promptfoo
- +150 (30d)
Owner type
- vigil-llm
- User
- promptfoo
- Organization
Full report
- vigil-llm
- Trust report
- promptfoo
- Trust report
Typed relationship
Shared compatibility
- Python · vigil-llm: Python runtime · promptfoo: Python runtime
Choose vigil-llm if…
- vigil-llm is primarily Python; promptfoo is TypeScript.
- License: vigil-llm is Apache-2.0, promptfoo is MIT.
- `Vigil` and `PromptFoo` both evaluate LLM inputs, but they do so from different perspectives: security vs. quality/red-teaming.
- Tags unique to vigil-llm: adversarial-attacks, large-language-models, llm-security, prompt-injection.
- When deploying large language models that require high levels of input security, vigil-llm can be employed to detect maliciously crafted inputs intended to manipulate model behavior.
When NOT to use vigil-llm
- If your application does not require high security against malicious inputs or if the risks of prompt injection are minimal due to controlled input sources, vigil-llm might be unnecessary.
- For projects that focus on optimizing output speed rather than input robustness, other tools might be more appropriate as vigil-llm could add significant processing overhead.
Choose promptfoo if…
- promptfoo is primarily TypeScript; vigil-llm is Python.
- License: promptfoo is MIT, vigil-llm is Apache-2.0.
- Requirements: Requires Node.js >=22.22.0, with Node.js 24 LTS recommended.; API keys for most LLM providers are required and should be set as environment variables..
- `Vigil` and `PromptFoo` both evaluate LLM inputs, but they do so from different perspectives: security vs. quality/red-teaming.
- Tags unique to promptfoo: ci, ci-cd, cicd, evaluation.
- When you need to compare the performance of various LLMs such as GPT, Claude, Gemini, DeepSeek, and more.
When NOT to use promptfoo
- If you are working with languages other than TypeScript, as Promptfoo is specifically designed for TypeScript environments.
- When you do not need to compare multiple LLMs and only require a simple prompt testing tool without advanced features like red teaming.
Explore
Sources
Every stat on this page traces to a dated GitHub sync, license file, enrichment field, or trust scan.
- GitHub stars (deadbits/vigil-llm) · observed Sep 20, 2026
- GitHub forks (deadbits/vigil-llm) · observed Sep 20, 2026
- Last push (deadbits/vigil-llm) · observed Jan 31, 2024
- License file (Apache-2.0) · observed Sep 20, 2026
- Decision facts (enrichment) · observed Jul 15, 2026
- Trust scan (lockfile / OSV) · observed Jul 11, 2026
- GitHub stars (promptfoo/promptfoo) · observed Sep 20, 2026
- GitHub forks (promptfoo/promptfoo) · observed Sep 20, 2026
- Last push (promptfoo/promptfoo) · observed Sep 18, 2026
- License file (MIT) · observed Sep 20, 2026
- Decision facts (enrichment) · observed Sep 18, 2026
- Trust scan (lockfile / OSV) · observed Sep 18, 2026
GitHub stars on cards: vigil-llm 496 · promptfoo 25k (synced Sep 20, 2026).
Common questions
- What is the difference between vigil-llm and promptfoo?
- vigil-llm: Detect prompt injections and other risky inputs in LLMs. promptfoo: Test prompts, agents, and RAGs. Compare performance of various LLMs.. See the comparison table for live GitHub stats and shared categories.
- When should I choose vigil-llm over promptfoo?
- Choose vigil-llm over promptfoo when vigil-llm is primarily Python; promptfoo is TypeScript; License: vigil-llm is Apache-2.0, promptfoo is MIT;
VigilandPromptFooboth evaluate LLM inputs, but they do so from different perspectives: security vs. quality/red-teaming; Tags unique to vigil-llm: adversarial-attacks, large-language-models, llm-security, prompt-injection; When deploying large language models that require high levels of input security, vigil-llm can be employed to detect maliciously crafted inputs intended to manipulate model behavior. - When should I choose promptfoo over vigil-llm?
- Choose promptfoo over vigil-llm when promptfoo is primarily TypeScript; vigil-llm is Python; License: promptfoo is MIT, vigil-llm is Apache-2.0; Requirements: Requires Node.js >=22.22.0, with Node.js 24 LTS recommended.; API keys for most LLM providers are required and should be set as environment variables.;
VigilandPromptFooboth evaluate LLM inputs, but they do so from different perspectives: security vs. quality/red-teaming; Tags unique to promptfoo: ci, ci-cd, cicd, evaluation; When you need to compare the performance of various LLMs such as GPT, Claude, Gemini, DeepSeek, and more. - When should I avoid vigil-llm?
- If your application does not require high security against malicious inputs or if the risks of prompt injection are minimal due to controlled input sources, vigil-llm might be unnecessary. For projects that focus on optimizing output speed rather than input robustness, other tools might be more appropriate as vigil-llm could add significant processing overhead.
- When should I avoid promptfoo?
- If you are working with languages other than TypeScript, as Promptfoo is specifically designed for TypeScript environments. When you do not need to compare multiple LLMs and only require a simple prompt testing tool without advanced features like red teaming.
- Is vigil-llm or promptfoo more popular on GitHub?
- promptfoo has more GitHub stars (25,251 vs 496). Stars measure visibility, not whether either tool fits your constraints.
- Are vigil-llm and promptfoo open source?
- Yes - both are open-source projects on GitHub (vigil-llm: Apache-2.0, promptfoo: MIT).
- Where can I find alternatives to vigil-llm or promptfoo?
- GraphCanon lists graph-backed alternatives at vigil-llm alternatives and promptfoo alternatives (vigil-llm markdown twin, promptfoo markdown twin), ranked by typed relationship edges rather than popularity votes.
- Is there a machine-readable version of this comparison?
- Yes. The markdown twin at this comparison mirrors this page for agents and LLM crawlers, with the same stats table and FAQ answers.
- Which is better maintained, vigil-llm or promptfoo?
- vigil-llm: Dormant. promptfoo: Very active. Compare maintenance labels, days since push, and release cadence in the trust section below - stars alone do not measure maintenance.
- Where are the full trust reports for vigil-llm and promptfoo?
- GraphCanon publishes per-repo trust reports with dated maintenance, provenance, and scan summaries: vigil-llm trust report; promptfoo trust report.