Mindgard vs Repello AI (2026)

The red teamer attacks the customer's AI endpoints, chatbots and agents, with presets for OpenAI, Anthropic, Azure and Hugging Face targets and listed support for Docker and AWS, and it runs from CI/CD workflow integrations, the CLI and the Burp Suite extension. Targets are reached with the customer's own API keys, request templates and response selectors. Tests cover the prompts, memory, data sources, guardrails, MCP or A2A servers and permissions around an agent, not only the model.

SourceMindgard, mindgard.ai, /automated-ai-red-teaming and docs.mindgard.ai/user-guide/testing-via-cli; docs.mindgard.airead 2026-10-06

ARTEMIS attacks the customer's AI through API endpoints and the browser and runs in CI/CD, and Workstation Lens deploys fixes for endpoint agents through CrowdStrike, SentinelOne, Defender, JAMF and Kandji. JumpCloud is now among those channels, and Workstation Lens can remove, update, disable or restrict a risky MCP server, skill or plugin on every affected employee device.

SourceRepello AI, repello.ai/product and /workstation-agent; repello.airead 2026-10-05

The red teamer follows a fixed adversary workflow of reconnaissance, exploitation planning and execution, chaining one shot and multi step attacks, and its adaptive attack agents learn from each response and change tactics. The platform runs its four stages, Discover, Recon, Attack and Defend, again as systems change. Customers choose the targets, the attacks and the goal of a multi turn test, but they cannot build a flow of their own.

SourceMindgard, mindgard.ai, /automated-ai-red-teaming and docs.mindgard.ai/user-guide/testing-via-cliread 2026-10-06

ARTEMIS deploys reasoning adversaries that orchestrate sophisticated attack sequences over many turns. It runs parallel attack threads and chains exploits across integrations, adapting its tactics to each response, so several of Repello's own agents attack at once.

SourceRepello AI, repello.ai/productread 2026-10-05

Red teaming runs continuously as AI systems change and on pipeline runs through CI/CD workflow integrations, and runtime protection responds to attacks in production as they happen. Tests can also start from the web app, the CLI, the Python SDK, the Burp Suite extension or a single click.

SourceMindgard, mindgard.ai/automated-ai-red-teaming and docs.mindgard.ai/llms.txtread 2026-10-06

ARTEMIS runs in CI/CD through a GitHub Action, and ARGUS acts on every call in real time, so neither waits for a person to start it. Workstation Lens also checks each coding agent action against policy as it happens, and Repello says ARTEMIS finds the first AI vulnerability in under a minute.

SourceRepello AI, repello.ai/product and /workstation-agentread 2026-10-05

Reconnaissance profiles the customer's AI systems, covering models, agents, tools, guardrails and system prompts, into a map of the estate, with recon types for guardrails, system prompt extraction, tool discovery, input and output encoding, output formatting and output rendering. Attacks draw on Mindgard's attack library and its own research, which has publicly identified more than 150 AI vulnerabilities, building on a decade of AI security research that began at Lancaster University. Recon results are kept per project, but there is no store the customer fills with its own documents.

SourceMindgard, mindgard.ai and docs.mindgard.ai/llms.txtread 2026-10-06

INVENTORY maps the customer's AI applications, workflows and exposure paths, and attacks draw on Repello's own library of 15M+ curated attack vectors. There is no retrieval over the customer's own material. INVENTORY builds a living AI bill of materials of every AI system in production, and Workstation Lens finds AI agents and their MCP servers, skills and plugins across employee devices.

SourceRepello AI, repello.ai and /workstation-agentread 2026-10-05

Within a run, the adaptive attack agents learn from the target's responses and change tactics, and each project keeps its tests, findings and recon results. The agents keep no memory from one run to the next.

SourceMindgard, mindgard.ai/automated-ai-red-teaming and docs.mindgard.ai/llms.txt; mindgard.airead 2026-10-06

The agents keep no memory. The INVENTORY map covers the customer's AI estate, and ARGUS logs calls for audit.

SourceRepello AI, repello.ai and /argusread 2026-10-05

Findings go to the customer's team with remediation guidance, and the team decides what to fix. Runtime protection identifies and responds to attacks in real time, and no step has a person approve a response before it happens. Testers choose which attacks run, can run a subset of the library, and set the technique and goal of each multi turn test.

SourceMindgard, mindgard.ai, docs.mindgard.ai/llms.txt and /user-guide/testing-via-cliread 2026-10-06

ARGUS enforces custom, context aware rules that the customer sets across modalities, languages and domains, and blocks unsafe actions at runtime. Workstation Lens checks each coding agent action against the customer's policies and blocks unsafe ones before they run. No step has a person approve or get asked before an agent action goes through.

SourceRepello AI, repello.ai/argus and /workstation-agentread 2026-10-05

Mindgard holds AICPA SOC 2 Type 2 certification. SAML single sign on can be enabled on request, so a team signs in through its own identity provider, such as Microsoft Entra, Okta or Google Workspace. Projects are shared by role, with an owner who created the project, admins who add, change or remove members, and members who view results and run tests. There is no audit log of activity on the platform. The framework mapping Mindgard offers applies to the customer's findings, not to Mindgard itself.

SourceMindgard, docs.mindgard.ai/user-guide/enterprise-setup, /user-guide/sharing-projects and mindgard.airead 2026-10-06

Repello carries AICPA SOC 2 and ISO 27001 marks, but it names no SSO, role model or audit surface for its own console. Workstation Lens policies are managed centrally, with audit trails, for the customer's coding agents.

SourceRepello AI, repello.ai and /workstation-agentread 2026-10-05

Each finding comes with clear evidence, attacker context and remediation guidance mapped to OWASP, MITRE ATLAS, the NIST AI RMF and the EU AI Act. Test results group flagged events by threat category and show every interaction in a test with its input, its output and Mindgard's observations, each event flagged or cleared, and the attack list downloads as CSV. The MITRE ATLAS Adviser rolls up risk across every test in the organization. There is no trace of the steps or tool calls inside the customer's agents.

SourceMindgard, mindgard.ai/automated-ai-red-teaming, docs.mindgard.ai/user-guide/test-results and /user-guide/reportingread 2026-10-06

ARGUS captures every call and anomaly in an activity center with full logging, audit trails and alerts for the customer's AI applications, recording each call, and ARTEMIS reports show attack paths from goals to prompts with evidence. Workstation Lens follows prompts, tool calls, commands, file and credential access and outbound destinations as coding agents work, with audit trails.

SourceRepello AI, repello.ai/argus, /product and /workstation-agentread 2026-10-05

Every customer is assigned to a Mindgard instance, and instances run in several parts of the world to meet data residency requirements, though the regions are not named. The CLI and the Burp Suite extension run in the customer's environment and proxy every model interaction, while Mindgard's SaaS application plans the attacks, judges them and stores the results. Testing runs from CI/CD, the CLI, Burp Suite or a single click against the customer's endpoints. HTTPS proxies are supported and SOCKS proxies are not. There is no self hosted or customer cloud option.

SourceMindgard, docs.mindgard.ai/user-guide/enterprise-setup and /user-guide/system-architectureread 2026-10-06

ARTEMIS and ARGUS have no named hosting region, customer environment or data residency option, and Repello does not say where test data is kept. ARTEMIS tests as a black box, and ARGUS works as production guardrails. Workstation Lens rolls out to employee devices through the customer's existing endpoint tools.

SourceRepello AI, repello.ai/argus and /workstation-agentread 2026-10-05

A prebuilt attack library ships with the platform, "an ever growing list of LLM/ML attack techniques", with named jailbreaks such as Crescendo, ActorAttack, AsciiArtAttack and DevModeV2, prompt injection encodings such as Ascii85 and ANSI escapes, and violation tests such as PromptAlignment and MaliciousGeneration.

AI safety datasets come ready to use, customers can generate or bring their own datasets and run a subset of attacks, and a remediation library covers sixteen defenses, from guardrails and output filtering to differential privacy. Mindgard sells no prebuilt agents for a customer to adopt.

SourceMindgard, docs.mindgard.ai/llms.txt; docs.mindgard.airead 2026-10-06

Repello ships a library of 15M+ curated attack vectors and prebuilt compliance mappings to MITRE, OWASP and NIST, to ISO 42001 and to the EU AI Act. The catalog is not named, and there are no prebuilt agents. Repello's products split by job. ARTEMIS handles red teaming, ARGUS runtime guardrails, INVENTORY discovery of AI systems and Workstation Lens coding agents on employee devices.

SourceRepello AI, repello.ai/product and repello.airead 2026-10-05

Any target model can be tested, with ready presets for OpenAI, Anthropic, Azure and Hugging Face, but Mindgard offers no model choice or routing for its own operation. It does not name the models behind its own attack planning.

SourceMindgard, mindgard.ai and docs.mindgard.ai/user-guide/testing-via-cliread 2026-10-06

The customer's models are what Repello tests and guards. Repello offers no model choice or routing of its own. Its testing agents work as reasoning adversaries, and Repello names no model provider behind them.

SourceRepello AI, repello.ai and /productread 2026-10-05

Developers get a Python SDK, a CLI reference and an API reference covering projects, tests, findings, datasets, multi turn tests and reconnaissance, and Mindgard publishes an OpenAPI specification. The CLI installs from PyPI and runs reconnaissance, single turn and multi turn tests against a target set inline or in a config file, and a Burp Suite extension brings the same tests into a penetration tester's tools. The API can create findings as well as list them.

SourceMindgard, docs.mindgard.ai/llms.txt and /user-guide/testing-via-cli; docs.mindgard.airead 2026-10-06

Repello publishes a Python client SDK for triggering actions on the Artemis platform (repello-artemis-sdk), an Artemis GitHub Action and a Claude Code plugin that connects to the hosted Artemis Recon server. Its open source tools also include Agent-Wiz, a command line tool for threat modeling agents built with LangGraph, AutoGen and CrewAI, and a free red teaming scan runs at recon.repello.ai.

SourceRepello AI, github.com/Repello-AI and repello.airead 2026-10-05

Mindgard runs continuous automated red teaming of the customer's AI agents and systems, before deployment and in production, including multi step attacks across agents, tools, APIs and data sources. Each run returns findings, evidence and remediation, and multi turn tests run from the CLI and the API with a technique and goal the tester sets.

Policies let the customer write the guidelines its application must follow, checked by regex refusal and policy violation observations that add flags or filter out irrelevant ones. The weaknesses it looks for include prompt injection, jailbreaks, system prompt leakage, model extraction, unsafe tool use, excessive agency and data or memory poisoning.

SourceMindgard, mindgard.ai/automated-ai-red-teaming, docs.mindgard.ai/user-guide/policies/overview and /user-guide/testing-via-cliread 2026-10-06

ARTEMIS autonomously red teams the customer's AI applications and agents through API and browser, finding and validating exploit chains of several stages with risk scores, evidence and mitigations mapped to compliance frameworks, and runs in CI/CD. It profiles each system's capabilities to tailor its attacks, covers all ten OWASP Top 10 for LLM categories, and tests text, image and audio in 100+ languages.

SourceRepello AI, repello.ai/productread 2026-10-05

Testing runs against inference and API endpoints, and a guide covers testing chatbot applications. Its agents do not control a browser or computer.

SourceMindgard, mindgard.ai and docs.mindgard.ai/llms.txtread 2026-10-06

Customers get no browser automation from Repello. ARTEMIS combines browser and API red teaming to test the customer's applications. Workstation Lens watches coding agents such as Claude Code, Cursor, GitHub Copilot, ChatGPT Desktop, Windsurf, OpenCode, Ollama and Codex on employee devices and does not operate a computer itself.

SourceRepello AI, repello.ai/product and /workstation-agentread 2026-10-05