Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

LLMMap

Free#26 of 29 in AI Security Testing Tools

LLMMap: Focused prompt-injection testing with broad attack coverage and flexible LLM backends. Ranked #26 of 29 in AI Security Testing Tools by our editors (6.6/10); pricing: Open source; best for web security teams testing injection points.

6.6/10Editor score
LLMMap6.6 Visit LLMMap

At a glance

  • Editor score
    6.6 / 10
  • Pricing
    Open source
  • Best for
    Web security teams testing injection points
  • Paid from
    Free
  • Prompt injection tests
    Yes
  • Facts checked
    21 Sep 2026
LLMMap screenshot
  • Where it wins

    • 227 prompt-injection techniques across 18 attack families
    • Burp Suite imports plus direct URL targets
    • Repeated probes with Wilson confidence intervals
  • Where it doesn't

    • Focused on prompt injection rather than broad security testing
    • Self-hosted command-line deployment
    • Intended for authorized testing of LLM applications

Our verdict on LLMMap

LLMMap is an open-source, self-hosted command-line framework for authorized security testing of applications that incorporate language models. It is aimed at web security teams assessing prompt-injection vulnerabilities across HTTP requests. The framework discovers injection points in query parameters, request bodies, headers, cookies, and paths, then sends targeted probes and analyzes the resulting responses. Direct URL targets and Burp Suite XML request imports support common testing workflows.

Its strongest area is prompt-injection test depth. LLMMap includes 227 techniques across 18 attack families and generates goal-directed attack prompts through a dual-LLM generator-and-judge workflow. Obfuscation options include base64, homoglyph, leetspeak, and language switching. Safe mode and dry-run scanning provide controls for planning and limiting probe activity. The framework also supports prompt-injection, jailbreak, and data-leakage tests, giving teams several related test objectives within its focused scope.

LLMMap fits teams that want an open-source framework they can run locally and connect to different model backends. Supported options include Ollama, OpenAI, Anthropic, and Google, while Burp Suite integration helps connect application testing with request capture and replay workflows. Findings are confirmed through repeated probes and Wilson confidence intervals rather than a single response. Teams seeking focused prompt-injection assessment should find the scope well aligned; teams needing broader application security coverage or a hosted product should look for a different tool. LLMMap is best suited to security practitioners comfortable with self-hosted command-line workflows and authorized testing environments.

Your product? Our editors can test LLMMap in depth and publish a review, labelled as paid · from $149/mo →

LLMMap pricing

Plans Open sourceFree Free to use — no paid tier required for the core job.
See plans on github.com

LLMMap fact sheet

Free planNot verified
Paid fromFree
Prompt injection testsYes
Jailbreak testsYes
Data leakage testsYes
Unsafe output testsNot verified
Custom test casesNot verified
Deployment modeSelf_hosted
DeploymentSelf-hosted
SupportDocs
Built forSolo, Small business (editorial estimate)
Integrations5 integrations: Burp Suite, Ollama, OpenAI, Anthropic, Google
PricingOpen source
Websitegithub.com
Facts checked21 Sep 2026

LLMMap integrations

LLMMap lists 5 integrations on its own site.

  • Burp Suite
  • Ollama
  • OpenAI
  • Anthropic
  • Google

Alternatives to LLMMap

See all LLMMap alternatives →

Used LLMMap? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used LLMMap for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — LLMMap 6.6/10

LLMMap is listed in our AI Security Testing Tools directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/llmmap/"><img src="https://www.itechguides.com/best/badge/llmmap.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update