What is an LLM vulnerability scanner?

An LLM vulnerability scanner sends batteries of adversarial probes — jailbreaks, prompt injections, PII extraction attempts, harmful-content requests — at a target LLM and grades the responses. The output is a vulnerability + optimization report with per-probe evidence, severity, and a prioritized fix list.

Which LLMs can I scan with FilterPrompt?

OpenAI, Anthropic, Google Gemini, Azure OpenAI, plus any OpenAI-compatible endpoint — Ollama, Groq, Mistral, Together AI, OpenRouter, Perplexity, Hugging Face, vLLM, or your own custom endpoint. Bring your own keys per tenant.

What kinds of vulnerabilities does FilterPrompt test for?

Jailbreaks (DAN, role hijack, translation smuggling), direct and indirect prompt injection, system-prompt extraction, harmful-content compliance, PII / secret leakage, bias & fairness, RAG poisoning, agent/tool abuse, output quality, and robustness — categories map to the OWASP LLM Top 10.

How are probes graded?

Each probe declares an evaluator: regex match, refusal-check, contains-check, or an AI judge (Gemini 3 Flash). Pass/fail comes with severity, category, the exact prompt sent, the model's full response, and the evaluator's reason — fully auditable.

How much does a scan cost?

1 credit per probe executed. New accounts get 1 welcome credit on signup. Pay-as-you-go credit packs after that — credits never expire. Connecting LLMs and creating tenants is free.

MCP Scanner Tool: Secure MCP Server Vulnerability Scanner

Scanner · 2026-07-10 · 9 min read · FilterPrompt Security Team

How an MCP scanner tool tests Model Context Protocol servers for tool poisoning, prompt injection, and data exfiltration in agentic AI stacks.

Why an MCP scanner tool is now a buying requirement

The Model Context Protocol (MCP) turns any LLM app into an agentic system: the model calls tools, reads external context, and takes actions on the user's behalf. That new surface — MCP servers exposing tools, resources, and prompts — is exactly where 2026's most damaging LLM breaches happened. An MCP server security scanner is the only way to know whether your tools tolerate malicious inputs, and a runtime AI agent protection platform is the only way to stop attacks that reach production.

What an MCP vulnerability scanner tests

How FilterPrompt runs an MCP scan

Connect the MCP server URL (or npx / docker command) to a FilterPrompt tenant.
Choose the MCP probe pack — starter (12 probes) or full (40+ probes).
Run the scan; every tool call gets judge-scored with evidence and severity.
Export the PDF report — audit-ready for ISO 42001 and the EU AI Act.
Flip on runtime protection so the same rules block attacks live in production.

MCP Scanner Tool: Secure MCP Server Vulnerability Scanner

Why an MCP scanner tool is now a buying requirement

What an MCP vulnerability scanner tests

How FilterPrompt runs an MCP scan

Related