Promptfoo: Pricing, Tiers and What's Actually Covered
Open-source LLM eval and red-team scanner. Strong on jailbreak and prompt-injection test generation. Cloud and Enterprise tiers add team collaboration and continuous monitoring.
Pricing tiers
Verbatim from the Promptfoo pricing page on 2026-06-19. Quote-only tiers are surfaced as such, never with an inferred price.
| Tier | Price | Free allowance | Notes |
|---|---|---|---|
| Community (open source) | Free / month | Up to 10K red-team probes per month, community support | All core eval and red-team features |
| Enterprise | Quote only | - | Custom pricing, team collaboration, continuous monitoring, priority support |
| On-Premise | Quote only | - | Custom pricing, full infrastructure control |
Source: https://www.promptfoo.dev/pricing/ | Verified 2026-06-19
OWASP LLM Top 10 coverage
What Promptfoo defends against, as claimed on its product pages and security documentation. Coverage flags are binary: an item is listed only if the vendor names the attack class explicitly.
- LLM01 Prompt injection
- LLM02 Sensitive information disclosure
- LLM03 Supply chain
- LLM04 Data and model poisoning
- LLM05 Improper output handling
- LLM06 Excessive agency
- LLM07 System prompt leakage
- LLM08 Vector and embedding weaknesses
- LLM09 Misinformation
- LLM10 Unbounded consumption
Hidden costs
Beyond the line-item price, every runtime AI guardrail carries operating costs the vendor page does not surface. Plan for these in any board paper.
- Per-call latency overhead. Guardrail check sits in the request path; budget 50 to 300 ms extra per LLM call.
- False-positive remediation. Allocate engineering time to tune policies after every guardrail rule change.
- Logging and retention. Guardrail decisions need to land in your SIEM. See siemcostcalculator.com.
- On-call coverage. Treat AI security alerts like SOC alerts. See securityoperationscost.com.
What Promptfoo is best for
Open-source LLM eval and red-team scanner. Strong on jailbreak and prompt-injection test generation. Cloud and Enterprise tiers add team collaboration and continuous monitoring.
Promptfoo pricing FAQ
Common questions about Promptfoo, answered from the verified figures above. Every answer restates a value from the pricing table, not an inferred one.
How much does Promptfoo cost?
Promptfoo offers Free Community (open source), Team starts at published rate. Paid tiers, where they exist, are shown in the pricing-tier table above, verified 2026-06-19.
Does Promptfoo have a free tier?
Yes. Promptfoo has a "Community (open source)" tier at no charge, with a free allowance of Up to 10K red-team probes per month, community support. See the pricing table above for the paid scopes.
Does Promptfoo defend against prompt injection?
Yes. Promptfoo explicitly names OWASP LLM01 prompt injection among the attack classes it covers.