Devtoolwatch BoardGet it every Monday

promptfoo review

promptfoo is a CLI and library for evaluating and red-teaming LLM-based apps, including prompts, agents, and RAG pipelines.

Updated Nov 1, 2026. Review written Oct 25, 2026 from the project's own sources; usage data refreshed every Monday.

TL;DR

promptfoo is a command-line tool and library for testing prompts, models, agents, and RAG apps, and for red-team vulnerability scanning. It is for developers shipping LLM apps who want repeatable checks in CI/CD. Configs are declarative, and evals run locally, so prompts stay on your machine.

promptfoo at a glance

Category
Evals and observability
Maintained by
promptfoo (organization, @promptfoo on GitHub)
License
MIT
Language
TypeScript, CSS, JavaScript
Repository
github.com/promptfoo/promptfoo
Website
promptfoo.dev
npm package
promptfoo 0.125.1
Latest release
0.125.1 on GitHub, Oct 25, 2026
First published
Apr 28, 2023

What promptfoo does

  • promptfoo runs automated evaluations of prompts and models against test cases you define.
  • promptfoo red-teams LLM apps for prompt injections, jailbreaks, PII leaks, business rule violations, and insecure tool use in agents.
  • promptfoo compares models side by side across providers such as OpenAI, Anthropic, Azure, Bedrock, and Ollama.
  • promptfoo runs automated checks in CI/CD pipelines.
  • promptfoo reviews pull requests for LLM-related security and compliance issues through code scanning.
  • promptfoo generates security vulnerability reports and lets you share results with your team.

How it works

promptfoo is a TypeScript CLI and Node.js package. You describe prompts, providers, and tests in declarative config files, then run evals with `promptfoo eval` and view the results with `promptfoo view`. It connects to LLM providers through their APIs, usually with an API key set as an environment variable. It works with any LLM API or programming language, and it runs evals locally.

How to install and start using promptfoo

With npm

npm install -g promptfoo

With Homebrew

brew install promptfoo

With pip

pip install promptfoo

Requirements

  • Node.js 22.22.0 or newer for the npm package.
  • An API key for most LLM providers, set as an environment variable.

First steps

  1. Create a sample project with `promptfoo init --example getting-started`.
  2. Set your provider API key as an environment variable, for example `export OPENAI_API_KEY=sk-abc123`.
  3. Change into the `getting-started` folder and run `promptfoo eval`.
  4. Open the results with `promptfoo view`.

Who promptfoo is for

  • Developers who want repeatable tests for prompts, agents, and RAG pipelines.
  • Teams that want to scan LLM apps for security vulnerabilities before shipping.
  • Teams that want to add LLM checks to CI/CD pipelines and pull request reviews.
  • Developers choosing between models from several providers using their own test cases.

Limitations to know

  • Some integrations, including the Claude Agent, Codex, WatsonX, Langfuse, and Slack SDKs, are opt-in installs as of recent releases.
  • The hosted ChatKit provider was removed in version 0.124.0.
  • The npm package requires a recent Node.js version (22.22.0 or newer).

Is promptfoo growing? Usage data

In the week of Oct 25–31, 2026, promptfoo ranked #83 on the Devtoolwatch Board and #6 in Evals and observability, with a momentum score of 67 out of 100. Its main package had about 1.2M downloads that week, +16% against its own 4-week average.

New GitHub stars per week for promptfoo12 weeks from Aug 9, 2026: 199, 219, 199, 189, 215, 248, 201, 220, 217, 239, 314, 306 new stars, an average of 231 a week.Aug 9week of Oct 25
New GitHub stars per week for the last 12 weeks, from GitHub's stargazer history (today's stargazers by the week they starred).
Show the weekly numbers
New GitHub stars per week for promptfoo
Week ofNew stars
Aug 9, 2026199
Aug 16, 2026219
Aug 23, 2026199
Aug 30, 2026189
Sep 6, 2026215
Sep 13, 2026248
Sep 20, 2026201
Sep 27, 2026220
Oct 4, 2026217
Oct 11, 2026239
Oct 18, 2026314
Oct 25, 2026306

On Hacker News

The Board ranks tools by four signals each week: new stars, new stars for the repo's size, added downloads and download growth beyond the market. How the ranking works.

promptfoo alternatives

Other LLM evals and observability tools on the Board in the week of Oct 25–31, 2026, by momentum:

Evals and observability ranked by momentum, the week of Oct 25–31, 2026
RankToolStarsDownloads/wk
#1SkillSpectorSkillSpector is NVIDIA's security scanner that checks AI agent skills for vulnerabilities, malicious patterns, and supply-chain risks…23.7k–
#2JudgevalJudgeval is an open-source Python SDK for tracing and evaluating LLM-powered agents with prompt-based judges and online monitoring.1.1k80.2k
#3A.I.G (AI-Infra-Guard)A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak…7.2k–
#4LangfuseLangfuse is an open source LLM engineering platform for tracing, evaluating, prompt management, and debugging LLM applications and agents.36.8k9.8M
#5OpikOpik is an open-source platform from Comet for tracing, evaluating, and monitoring LLM applications, RAG systems, and AI agents.23.1k709.1k
#7garakgarak is a command-line LLM vulnerability scanner from NVIDIA that probes models for jailbreaks, prompt injection, data leakage,…9.8k12.9k

All LLM evals and observability tools, ranked

Recent promptfoo releases

promptfoo FAQ

Is promptfoo free and open source?

Yes. promptfoo's source code is on GitHub (promptfoo/promptfoo) under the MIT license, so you can use it for free. Its website also links to a pricing page (https://promptfoo.dev/pricing/) for any paid plans.

How do I install promptfoo?

Run npm install -g promptfoo. It needs Node.js >=22.22.0. The install section above has the other options from the project's README.

Is promptfoo still maintained?

Yes. The promptfoo/promptfoo repository was last updated on Oct 25, 2026, and the latest release, 0.125.1 on GitHub, came out on Oct 25, 2026.

How popular is promptfoo?

promptfoo has 26.7k GitHub stars as of Nov 1, 2026. It gained 306 new stars in the week of Oct 25–31, 2026, against a 12-week average of 231 a week. Its main package had about 1.2M downloads that week, +16% against its own 4-week average. That made it #6 among LLM evals and observability tools on the Devtoolwatch Board.

promptfoo vs DeepEval: how do they compare?

promptfoo and DeepEval are both tracked by Devtoolwatch as LLM evals and observability tools. promptfoo has 26.7k GitHub stars and DeepEval has 19.2k. In the week of Oct 25–31, 2026, promptfoo's main package had 1.2M downloads and DeepEval's had 769.5k. DeepEval is an open-source Python framework for unit testing and evaluating LLM apps, agents, chatbots, voice agents, and RAG pipelines. DeepEval review.

promptfoo vs Langfuse: how do they compare?

promptfoo and Langfuse are both tracked by Devtoolwatch as LLM evals and observability tools. promptfoo has 26.7k GitHub stars and Langfuse has 36.8k. In the week of Oct 25–31, 2026, promptfoo's main package had 1.2M downloads and Langfuse's had 9.8M. Langfuse is an open source LLM engineering platform for tracing, evaluating, prompt management, and debugging LLM applications and agents. Langfuse review.

What are the best alternatives to promptfoo?

Other LLM evals and observability tools on the Devtoolwatch Board in the week of Oct 25–31, 2026, by momentum: SkillSpector (#1), Judgeval (#2), A.I.G (AI-Infra-Guard) (#3), Langfuse (#4), Opik (#5). The alternatives table above has their numbers.

What is promptfoo used for?

promptfoo is used to evaluate and red-team LLM-based apps. Developers use it to test prompts and models, compare providers side by side, scan for vulnerabilities such as prompt injection and data leaks, and automate these checks in CI/CD.

How do you run promptfoo?

promptfoo runs from the command line. Run promptfoo init --example getting-started, set your provider API key, then run promptfoo eval and promptfoo view inside the project folder. You can also run any command without installing by using npx promptfoo@latest.

How does promptfoo work?

promptfoo reads declarative config files that list prompts, providers, and tests. It sends the tests to the configured LLM APIs, scores the outputs, and shows the results in the CLI or a web viewer. For red teaming, it generates attacks tailored to your target application.

Is promptfoo joining OpenAI?

Yes. The promptfoo README states that Promptfoo is now part of OpenAI. It also states that Promptfoo remains open source and MIT licensed.

Is promptfoo safe for private prompts?

promptfoo runs LLM evals locally, so your prompts never leave your machine, according to the README. Prompts are still sent to whichever LLM provider APIs you configure.

Does promptfoo work with Python?

Yes. promptfoo is available through pip install promptfoo. The README says it works with any LLM API or programming language. It also ships as a Node.js package.

Sources

  1. promptfoo/promptfoo on GitHub
  2. promptfoo README
  3. promptfoo on npm
  4. promptfoo website
  5. Release 0.125.1 (Oct 25, 2026)
  6. Release 0.125.0 (Oct 23, 2026)
  7. Release code-scan-action-0.2.2 (Oct 8, 2026)
  8. Hacker News: Questions censored by DeepSeek
  9. Hacker News: Promptfoo Is Joining OpenAI
  10. Hacker News: Show HN: Automated red teaming for your LLM app
  11. Devtoolwatch Board, the week of Oct 25–31, 2026

promptfoo README badge

Maintainers can show the tool's weekly Board rank in their README:

Devtoolwatch badge for promptfoo

[![Devtoolwatch](https://index.devtoolwatch.com/badge/promptfoo.svg)](https://index.devtoolwatch.com/tools/promptfoo/)

How this page is made: Devtoolwatch writes each review from the project's README, releases, package metadata and website, with an AI model, then checks every claim against the source it cites and drops what the sources don't support. The numbers come from Devtoolwatch's daily GitHub snapshots, GitHub's stargazer history, and the npm and PyPI download APIs. Spotted an error? Email [email protected].