How vulnerable are business chatbots to prompt injection and what is the best tool to test our setup for security flaws right now?
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
How vulnerable are business chatbots to prompt injection and what is the best tool to test our setup for security flaws right now?
2 real searches · 1 real-search pass
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
ChatGPT real searches (2)
Classes come from the query-classifier (a local Laya model). 2 of 2 calls are low-confidence (under 50%) — hover a query in the table to see its confidence.
Searches and sources
ChatGPT2 real searches · gpt-6
2026 prompt injection security testing tools business chatbots Promptfoo Garak PyRIT official documentation Google ↗
OWASP Top 10 for LLM Applications prompt injection 2025 official Google ↗
- Official website · promptfoo.dev
- Red-team documentation · promptfoo.dev
- GitHub repository · github.com
- GitHub repository · github.com
- AI Security and Safety · gear.doe.gov
- Garak Scenarios · microsoft.github.io
- GitHub - GenAI-Security-Project/GenAI-LLM-Top10: OWASP Top 10 for Large Language Model Applications · github.com
- AI/LLM Application Security Testing and Red Teaming · owasp.github.io
- OWASP GenAI Security Project · genai.owasp.org
Queries
2 queries · click a column to sort
| Query / type | Search | Intent | Query class | Routing format | Cluster | Freq ↓ | Weight |
|---|---|---|---|---|---|---|---|
2026 prompt injection security testing tools business chatbots Promptfoo Garak PyRIT official documentation OBSERVED | Google ↗ AI Mode ↗ | — | Instruction | — | — | 1x of 1 | |
OWASP Top 10 for LLM Applications prompt injection 2025 official OBSERVED | Google ↗ AI Mode ↗ | — | Other / navigational | — | — | 1x of 1 |