Please turn JavaScript on
header-image

Promptfoo Blog

Following Promptfoo Blog's news feed is very easy. Subscribe using the "follow" button on the top right and if you want to, choose the updates by topic or tag.

We will deliver them to your inbox, your phone, or you can use follow.it like your own online RSS reader. You can unsubscribe whenever you want with one click.

Keep up to date with Promptfoo Blog!

Promptfoo Blog: Build Secure AI Applications | Promptfoo

Is this your feed? Claim it!

Publisher:  Unclaimed!
Message frequency:  0.11 / day

Message History

OpenClaw combines web browsing, local file access, and outbound actions in one user-facing assistant. The capabilities that make OpenClaw valuable for work also increase the security risk.

In a controlled lab, we tested a local OpenClaw deployment with browser access, writabl...


Read full story

McKinsey's Lilli looks, on the public record, like an application-security incident that reached an AI system, not a model jailbreak. CodeWall's March 9, 2026 writeup says its autonomous agent found exposed API documentation, unauthenticated endpoints, a SQL ...


Read full story

Today we are announcing that Promptfoo has agreed to be acquired by OpenAI.

Promptfoo will remain open source and we will continue to serve users and customers.

We founded Promptfoo in 2024 to make it easy for developers to systematically test their AI applications. We quickly realized that adversarial tests for security, safety, and other behavioral risks were ...


Read full story

Before joining Promptfoo, I worked on model scanning at Databricks. Teams pulled models from public registries, ran torch.load(), and treated the artifact like inert data. Model files are executable at load time.

Since joining Promptfoo last September, I've been building ModelAudit, a static security scanner for ML model files. We filed 7 GHSAs against existing scanner...


Read full story