STANDARD assessments use OptimaTrust’s own engine. Security and red-team modes can run Garak, PyRIT, promptfoo, DeepEval, and Giskard when those labs are installed. Marketing sites and non-model URLs are marked not applicable — never a fabricated pass. Failed tests become findings. Findings are not incidents until an operator opens them.
Outcomes
- Prompt injection, jailbreak, and agentic-risk tests
- Honest not-applicable outcomes
- Findings that feed the assurance score
