Secure your LLMs.
Prove your compliance.
Shield LLM runs automated security tests on any AI chatbot: prompt injection, data extraction, jailbreaks. Security grade, detailed vulnerabilities, audit-ready PDF report in under a minute.
Your AI chatbots are already under attack.
Most are vulnerable.
Production LLMs pass classic web audits. They fail against LLM-specific attacks: prompt injection, data extraction, guardrail bypass.
The attacks a classic scanner never sees
LLMs introduce a completely new attack surface. Your WAF, your DAST, your annual pentest: none of them are equipped for it.
- LLM01Prompt injection that hijacks model behavior
- LLM02Sensitive information leakage in responses
- LLM06Excessive agency (unauthorized actions)
- LLM07System prompt extraction via social engineering
- LLM09Disinformation and exploitable hallucinations
Three pillars. One tool.
Shield LLM combines automated red teaming, AI-judge analysis and regulatory compliance in a CLI you install in one command.
Automated red teaming
Full coverage of the OWASP LLM Top 10: prompt injection, system extraction, excessive agency, multi-turn jailbreak, supply chain. Runs in under a minute.
OWASP LLM TOP 10 · CRESCENDOLLM-as-Judge
AI-driven analysis goes beyond regex. A judge model evaluates each response in context to catch nuanced vulnerabilities that pattern matching misses.
3 LAYERS · CONTEXT + RULES + JUDGEEU AI Act compliance
Automatic scoring aligned with articles 5, 9, 10, 13, 14 and 15 of the regulation. Audit-ready PDF report, actionable remediations, timestamped evidence.
7 REQUIREMENTS · SIGNED PDF EXPORTEU AI Act. Audit-ready.
Your LLM falls under the European AI regulation. The obligations are concrete: robustness, transparency, human oversight, data governance. Shield gives you the technical scoring and the evidence.
Assess my compliance →Compliance assessment · support-bot.acme
Your prompts never leave your environment.
Shield LLM runs as a CLI from your environment, calling your chatbot endpoint directly. No proxy, no MITM, no credentials to share.
The only data sent to our servers: the scan report summary, so you can review it from your dashboard.
- 100% local execution from your environment
- Your chatbot credentials stay in your config, never sent to us
- Data hosted in Europe · encryption at rest
- Signed PDF export ready for your internal audits
Zero interception
Prompts go straight to your chatbot endpoint. No relay, no proxy.
Credentials stay local
Your shield.config.json lives on your machine. We never see your endpoint secrets.
Isolated storage
Scan data is scoped to your environment. Nothing persists without your action.
Verifiable output
Every result includes evidence, confidence and OWASP mapping. Native PDF export.
Start free. Scale when you need it.
The base scan is free forever. Upgrade to Pro for AI evaluation, PDF reports and custom tests.
- 5 scans per month
- OWASP LLM Top 10 (10 attacks)
- Rule-based analysis
- Security grade (A–F)
- 30-day history · 1 domain
- 30 scans per month
- 74 advanced attacks + multi-turn Crescendo
- Full LLM-as-Judge evaluation
- Audit-ready PDF reports
- Technical EU AI Act compliance
- Custom tests (up to 50)
- Unlimited multi-domain
- Everything in Pro
- EU AI Act compliance (technical + structural)
- SSO (Keycloak, Okta, Entra ID)
- Audit log + BYOK
- 1000 scans / month
- Dedicated account manager
Frequently asked questions
Everything you need to know about Shield LLM security testing.
What happens during a scan?
Is my data sent to a server?
Does it work with any chatbot?
How long does a scan take?
How is the security grade calculated?
Does Shield LLM really cover the EU AI Act?
Secure your AI before the attackers.
Install the Shield LLM CLI and get your first security report in under a minute. No SDK, no code changes.

