Basilisk

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

Basilisk is ranked #9 of 29 in AI security testing tools on Inferse. It runs on Linux, macOS, Windows. There is a free plan.

Compared on AI security testing tools

Free plan: Yesbasilisk.rothackers.com
Prompt injection tests: Yesbasilisk.rothackers.com
Jailbreak tests: Yesbasilisk.rothackers.com
Data leakage tests: Yesbasilisk.rothackers.com
Unsafe output tests: Yesbasilisk.rothackers.com
Custom test cases: Yesbasilisk.rothackers.com
Deployment mode: self_hostedbasilisk.rothackers.com

Facts

Purpose: Basilisk is an open-source AI/LLM red teaming framework for authorized security testing, vulnerability research, and academic study.basilisk.rothackers.com · 30 Sept 2026
Attack modules: It includes 32 attack modules across 8 categories mapped to the OWASP LLM Top 10.basilisk.rothackers.com · 30 Sept 2026
Prompt evolution: Its Smart Prompt Evolution engine uses 15 mutation operators, 5 crossover strategies, and multi-signal fitness scoring.basilisk.rothackers.com · 30 Sept 2026
Multi-turn testing: Multi-turn modules perform prompt cultivation, authority escalation, and sycophancy exploitation with guardrail drift monitoring.basilisk.rothackers.com · 30 Sept 2026
Provider integrations: It supports OpenAI, Anthropic, Google, xAI Grok, Groq, Azure OpenAI, GitHub Models, Ollama, and custom HTTP or WebSocket endpoints.basilisk.rothackers.com · 30 Sept 2026
Reports: Basilisk exports HTML, SARIF 2.1.0, JSON, Markdown, and PDF reports.basilisk.rothackers.com · 30 Sept 2026
CI/CD: GitHub Actions and GitLab CI integration uses SARIF output and can fail pipelines on critical findings.basilisk.rothackers.com · 30 Sept 2026
Install methods: The project provides Windows, macOS, and Linux desktop packages, a pip CLI, Docker images, and source installation.basilisk.rothackers.com · 30 Sept 2026
Prerequisites: The CLI requires Python 3.11 or higher and an API key for the LLM provider being tested.basilisk.rothackers.com · 30 Sept 2026
Privacy: The CLI and Desktop app do not send telemetry, scan results, API keys, or personal data to Basilisk.basilisk.rothackers.com · 30 Sept 2026
Local processing: Prompt evolution, payload mutation, and report generation run entirely on the user's local machine.basilisk.rothackers.com · 30 Sept 2026
Supply-chain security: The project says it uses signed releases and verified checksums, while cautioning that it cannot guarantee absolute security.basilisk.rothackers.com · 30 Sept 2026
License: Basilisk is released under the AGPL-3.0 license, permitting use, copying, modification, and distribution subject to the license and terms.basilisk.rothackers.com · 30 Sept 2026
Authorized use: Users must obtain explicit written authorization before testing AI or LLM systems they do not own.basilisk.rothackers.com · 30 Sept 2026
Support: Security issues and privacy questions can be reported to [email protected].basilisk.rothackers.com · 30 Sept 2026