Augustus review
A portable Go scanner for probing LLMs across attacks, providers, and custom endpoints.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Augustus is an open-source, Go-based LLM vulnerability scanner from Praetorian Security, Inc. It is designed for security professionals conducting authorized production testing of large language models. The tool covers prompt injection, jailbreaks, data extraction, encoding exploits, agent attacks, unsafe outputs, and safety-benchmark scenarios. Its self-hosted deployment model and single portable binary suit teams that want to run security probes within their own testing environments.
Its main strength is breadth within adversarial LLM testing. Augustus provides 210+ vulnerability probes, 90+ response detectors, and prompt transformations for encoding, paraphrasing, poetry, translation, and case changes. The detectors include pattern matching, LLM-as-a-judge, and unsafe-content detection. Integrations span 28 LLM provider categories and 43 generator variants, including OpenAI, Anthropic, Azure OpenAI, AWS Bedrock, Google Vertex AI, Cohere, Replicate, HuggingFace, Together AI, Anyscale, Groq, Mistral, Fireworks, DeepInfra, and NVIDIA NIM. That combination makes it a fit for teams comparing behavior across hosted or local model setups.
Operational flexibility is another defining feature. Concurrent scanning includes rate limiting, retries, and timeout handling, while custom REST endpoint testing supports request templates and response extraction. Results can be exported as table, JSON, JSONL, or HTML reports, and plugin-style extensibility supports additional customization. Teams that need a portable, scriptable scanner with varied probes and provider connections should consider Augustus. It is less suitable for buyers seeking a managed platform, a described enterprise support tier, or a product centered on general AI governance rather than security testing.
Augustus pros and cons
- Where it wins
- 210+ probes across jailbreak, injection, extraction, agent, and safety tests
- 28 provider categories, 43 generator variants, and 90+ response detectors
- Single Go binary with concurrent scanning, custom REST tests, and report exports
- Where it doesn't
- Self-hosted deployment requires security teams to manage the environment
- Broad provider and probe coverage may require configuration for each target
- The published details do not describe platform coverage or paid support tiers
Augustus fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. How we rank.
Last updated · How we research and update