garak
Command-line scanner that sends attack probes to an LLM or chat system and reports which safety and security checks fail.
By NVIDIA · garak.ai
Package download activity
Each package is shown on its own; packages that can be installed together are never added up. Week 2026-W40 (2026-09-28 to 2026-10-04).
PyPIgarak · headline (ranked)
11,417 downloads in the week, +25.8% vs prior week · rank 28 on PyPI
Reproduce this number (ClickHouse SQL) · registry metadata (mapping checked 2026-10-07)
GitHub stars
NVIDIA/garak: 9,490 stars (rank 12). Stars are a point-in-time count of a repository's bookmarks, not people using the tool.
Series starts 2026-W40 (9,490).
Facts
| Categories | Evaluation, Guardrails & safety | |
|---|---|---|
| Status | Generally available | |
| Licence | Apache-2.0 | source, checked 2026-10-07 |
| Self-host | Yes | source, checked 2026-10-07 |
| OpenTelemetry | Unknown | source, checked 2026-10-07 |
| Pricing model | free | |
| Entry price | Free; open-source tool with no paid plan on garak.ai or in the README | source, checked 2026-10-07 |
| Free tier | Yes | |
| Measurability | Measured (mapped SDK packages) |
Facts last verified 2026-10-07 on first-party pages. Prices as published, taxes excluded; non-USD prices are not converted.
Compare
Spotted an outdated fact? The methodology page explains how facts are checked; corrections are applied at the next weekly build.