LLM Vulnerability Scanners: garak and PyRIT

NVIDIA garak is an open-source LLM vulnerability scanner whose documentation frames its purpose as testing the security of systems that take prompts and return text. It uses a configured generator to communicate with the target, probes to attempt a defined failure, attempts to record interactions, detectors to look for a particular failure signal, and evaluators to summarize results for probe-detector pairs. Security-oriented examples include prompt injection, data leakage, and other prompt-driven weaknesses in the configured target. A scan is only as relevant as its selected target, probes, and detector behavior. Microsoft PyRIT is a more general red-teaming framework with scanner, GUI, and framework modes. Its current documentation describes targets, scenarios, attack techniques, memory, and flexible scorers. Teams can select security-related scenarios, such as web injection or system-prompt extraction, when those objectives fit the system under review. PyRIT also supports broader safety assessment, but that broader scope should not be confused with a security guarantee or a claim that every scenario is a vulnerability test. The operator needs to choose the objective and understand how the configured scorer judges outcomes. Use these tools to produce evidence for a defined security review, not a universal pass/fail certificate. Test an authorized staging or assessment target with the integrations relevant to the real application. Inspect attempts behind a flagged result, reproduce meaningful findings, determine whether the issue affects the deployed workflow, and record the model or endpoint version and chosen test configuration. A scan with no findings means only that those configured tests did not trigger a detector under that run. It does not show that untested attack paths, tools, data sources, or application controls are secure.