PyRIT
github.comlibraryself-hosted
PyRIT is a self-hosted library in the Guardrails & Safety layer of the AI stack. Microsoft's red-team tool for generating and scoring attack prompts.
By Lattice editorial · Facts verified · method
- licence
- MIT
- language
- Python
- cost
- free
- owned by
- Production & Governance
Verified 2026-09build refuses it from 2027-04
Use PyRIT when
Generating and scoring attack prompts systematically.
Skip PyRIT when
You are not authorised to test the target.
Stops the bad input before it, and the bad output after. — that is what this layer of the stack is answerable for. See the full Guardrails & Safety section for the rest of the options.
Visit github.comCompare with another toolBadge this entry
[](https://lattice.kunjshah.in/guardrails-safety/pyrit)Quick answers
- Is PyRIT open source?
- Yes. PyRIT is open source under the MIT licence. It is free to use.
- What are the alternatives to PyRIT?
- The closest alternatives to PyRIT are garak.
Reading on guardrails
Alternatives to PyRIT
Listed as an alternative to
- garakgarakScanner that probes models for known vulnerability classes.Use when Probing your own system for known vulnerability classes.Skip when You have no remediation path for whatever it finds.Apache-2.0 · self-hosted · free
Also in guardrails
- NeMo GuardrailsNeMo GuardrailsProgrammable rails that constrain conversational flow.Use when Constraining conversational flow with programmable rails.Skip when You need deep semantic moderation — it is not a classifier.Apache-2.0 · self-hosted · free
- Guardrails AIGuardrails AIValidators that check model output against a defined schema.Use when Validators that check output against a schema you define.Skip when You need free-form moderation rather than structural checks.Apache-2.0 · self-hosted · free
- Llama GuardLlama GuardSafety classifier for prompt and response moderation.Use when One classifier covering both prompt and response moderation.Skip when You need domain-specific policy enforcement.Llama-3.1-Community · self-hosted · free
- Microsoft PresidioMicrosoft PresidioPII detection and anonymization for text and images.Use when Detecting and anonymising PII in text and images.Skip when Your data is already pseudonymised at source.MIT · self-hosted · free
- Lakera GuardLakera GuardPrompt injection and jailbreak detection at the gateway.Use when Prompt-injection and jailbreak detection at the gateway.Skip when Requests cannot leave your network.proprietary · saas · usage-based
- garakgarakScanner that probes models for known vulnerability classes.Use when Probing your own system for known vulnerability classes.Skip when You have no remediation path for whatever it finds.Apache-2.0 · self-hosted · free
- Invariant GuardrailsInvariant GuardrailsGuardrails as code, enforced inline in the call path.Use when Guardrails as code, enforced inline in the call path.Skip when Self-hosting is a hard requirement.proprietary · managed · usage-based