augustus
LLM security testing framework for detecting prompt injection, jailbreaks, and adversarial attacks — 190+ probes, 28 providers, single Go binary
File Explorer
Download Latest Version (.zip)- devcontainer.json
- devcontainer.json
- Dockerfile
- settings.json
- bug_report.md
- feature_request.md
- ci.yml
- claude-code.yml
- claude-md-drift.yml
- codex-code.yml
- external-contribution.yml
- gemini-code.yml
- graphify-graph.yml
- leaderboard-backfill-caller.yml
- leaderboard-metrics.yml
- release.yml
- secrets-scan.yml
- security.yml
- verify-pins.yml
- dependabot.yml
- PULL_REQUEST_TEMPLATE.md
- flipattack_benchmark_test.go
- banner.go
- cli.go
- cli_test.go
- common.go
- main.go
- recon_context_test.go
- recon_scan_test.go
- scan.go
- scan_errored_test.go
- scan_pair_ollama_test.go
- scan_test.go
- base.yaml
- benchmark.sh
- pull-models.sh
- setup.sh
- Makefile
- About This Vault.md
- Tag Index.md
- Glossary.md
- Installation & Build.md
- Quickstart.md
- Threat Model & Authorized Use.md
- What Is Augustus.md
- Architecture MOC.md
- Attempt & Conversation Model.md
- Concurrency & Scanner.md
- Configuration System.md
- Core Interfaces.md
- Plugin Registration & Registries.md
- Scan Pipeline.md
- System Overview.md
- Attack Engine (PAIR & TAP).md
- Buffs.md
- Concepts MOC.md
- Detectors.md
- Generators.md
- Harnesses.md
- Multi-turn Attacks.md
- Probes.md
- Rate Limiting & Retry.md
- Scoring & Verdicts.md
- Tool-Use & Agent Attacks.md
- Adversarial Patch.md
- ANSI Escape.md
- API Key.md
- Art Prompts.md
- AutoDAN.md
- AV Spam Scanning.md
- Bad Characters.md
- Browsing.md
- Continuation.md
- Crescendo.md
- DAN.md
- Divergence.md
- Do Not Answer.md
- DRA.md
- Exploitation.md
- FlipAttack.md
- GCG.md
- Glitch.md
- GOAT.md
- Goodside.md
- Grandma.md
- Guardrail.md
- Hydra.md
- Latent Injection.md
- Leak Replay.md
- LMRC.md
- Malware Generation.md
- MCP Config Secret Scan.md
- Mischievous.md
- Misleading.md
- Multi-Agent.md
- Multimodal.md
- Obscure Prompt.md
- Package Hallucination.md
- PAIR.md
- Phrasing.md
- Poetry.md
- Prefix.md
- Probes MOC.md
- Prompt Injection.md
- RAG Poisoning.md
- Real Toxicity Prompts.md
- Snowball.md
- Suffix.md
- TAP.md
- Test Probe.md
- Tool Coercion.md
- Tool Use.md
- Topic.md
- Tree Search.md
- Web Injection.md
- Anthropic.md
- Anyscale.md
- AWS Bedrock.md
- Azure OpenAI.md
- Cohere.md
- DeepInfra.md
- Fireworks AI.md
- Function.md
- Generators MOC.md
- GGML llama.cpp.md
- Google Vertex AI.md
- Groq.md
- Hugging Face.md
- IBM watsonx.md
- LangChain Serve.md
- LangChain.md
- LiteLLM.md
- Mistral.md
- NeMo Guardrails.md
- NVIDIA Cloud Functions.md
- NVIDIA NeMo.md
- NVIDIA NIM.md
- Ollama.md
- OpenAI-Compatible.md
- OpenAI.md
- Rasa.md
- Replicate.md
- REST.md
- Test Generator.md
- Together AI.md
- Adversarial Patch Detector.md
- Agent Detector.md
- Always Detector.md
- ANSI Escape Detector.md
- Any Detector.md
- API Key Detector.md
- Art Prompts Detector.md
- Base Detector.md
- Continuation Detector.md
- DAN Detector.md
- Detectors MOC.md
- Divergence Detector.md
- Encoding Detector.md
- Exploitation Detector.md
- File Formats Detector.md
- FlipAttack Detector.md
- Goodside Detector.md
- Hijacking Detector.md
- Judge Detector.md
- Known Bad Signatures Detector.md
- Latent Injection Detector.md
- Leak Replay Detector.md
- LMRC Detector.md
- Malware Generation Detector.md
- MCP Config Leak Detector.md
- Misleading Detector.md
- Mitigation Detector.md
- Multi-Agent Detector.md
- Package Hallucination Detector.md
- PAIR Detector.md
- Patterns Detector.md
- Perspective Detector.md
- Poetry Harm Judge Detector.md
- Product Key Detector.md
- Prompt Injection Detector.md
- RAG Poison Detector.md
- RAG Poisoning Detector.md
- Shields Detector.md
- Snowball Detector.md
- TAP Detector.md
- Tool Coercion Detector.md
- Toxic Comment Detector.md
- Unsafe Content Detector.md
- Visual Jailbreak Detector.md
- Web Injection Detector.md
- Buffs MOC.md
- Constructed Language.md
- Encoding Buffs.md
- Flip.md
- Low-Resource Language.md
- Lowercase.md
- Paraphrase.md
- Poetry.md
- Unicode Smuggling.md
- Buffs in Practice.md
- CLI Reference.md
- Output & Reports.md
- Probe Selection & Globs.md
- Provider Configuration.md
- Scan Recipes.md
- Adding a Buff.md
- Adding a Detector.md
- Adding a Generator.md
- Adding a Probe.md
- Contributing MOC.md
- Development Setup.md
- Linting, CI & Commits.md
- Testing & Equivalence Tests.md
- YAML Templates.md
- Key Packages.md
- Package Map (pkg vs internal).md
- 2026-07-10-go-generate-registry-files-design.md
- Home.md
- benchmark-comprehensive.yaml
- config.yaml
- crescendo.yaml
- goat.yaml
- hydra.yaml
- mischievous.yaml
- ahocorasick.go
- ahocorasick_test.go
- automaton.go
- byte_equivalence_test.go
- byte_frequencies.go
- classes.go
- dfa.go
- LICENSE
- nfa.go
- prefilter.go
- README.md
- unsafe.go
- config.go
- config_test.go
- engine.go
- engine_test.go
- parse.go
- parse_test.go
- prompts.go
- prompts_test.go
- prune.go
- prune_test.go
- toolcalls.go
- toolcalls_test.go
- klingon.go
- klingon_test.go
- metaprompt.go
- ascii85.go
- atbash.go
- atbash_test.go
- base16.go
- base2048.go
- base32.go
- base64.go
- base64_test.go
- braille.go
- camelcase.go
- camelcase_test.go
- charcode.go
- charcode_test.go
- ecoji.go
- emoji.go
- emoji_test.go
- hex.go
- leet.go
- leet_test.go
- mathprompt.go
- mathprompt_test.go
- morse.go
- nato.go
- nato_test.go
- newbuffs_verification_test.go
- piglatin.go
- piglatin_test.go
- quotedprintable.go
- rot13.go
- sneaky_bits.go
- unicode_tags.go
- uuencode.go
- zalgo.go
- buffs.go
- flip_test.go
- modes.go
- templates.go
- lowercase.go
- lowercase_test.go
- config.go
- config_test.go
- deepl.go
- deepl_test.go
- lrl.go
- lrl_test.go
- ratelimited.go
- ratelimited_test.go
- config.go
- config_test.go
- fast.go
- paraphrase_test.go
- pegasus.go
- ratelimited_test.go
- config.go
- config_test.go
- exemplars.go
- exemplars_test.go
- metaprompt.go
- metaprompt_test.go
- strategies.go
- strategies_test.go
- function.go
- hypothetical.go
- smuggling_test.go
- advpatch.go
- argument_exfiltration.go
- argument_exfiltration_test.go
- chain_length.go
- chain_length_test.go
- fake_tool_call_text.go
- fake_tool_call_text_test.go
- tool_calls.go
- tool_calls_test.go
- tool_leak_judge.go
- tool_leak_judge_live_test.go
- tool_leak_judge_prompt.go
- tool_leak_judge_test.go
- tool_manipulation.go
- tool_manipulation_test.go
- fail.go
- fail_test.go
- pass.go
- pass_test.go
- ansiescape_test.go
- escaped.go
- raw.go
- any.go
- any_test.go
- apikey.go
- apikey_test.go
- completekey.go
- completekey_test.go
- patterns.go
- artprompts.go
- config.go
- config_test.go
- mitigation_config.go
- mitigation_config_test.go
- mitigation_strings.go
- string_detector.go
- string_detector_test.go
- trigger_match_detector.go
- trigger_match_detector_test.go
- triggers.go
- wrapped_detector.go
- continuation.go
- continuation_test.go
- dan.go
- dan_test.go
- repeat.go
- repeat_test.go
- decode_approx.go
- decode_approx_test.go
- decode_match.go
- decode_match_test.go
- README.md
- templates.go
- templates_test.go
- exploitation.go
- exploitation_test.go
- fileformats.go
- fileformats_test.go
- bypass.go
- bypass_test.go
- glitch_test.go
- goodside.go
- goodside_test.go
- hijacking.go
- cache.go
- cache_test.go
- config.go
- config_test.go
- judge.go
- judge_test.go
- prompts.go
- prompts_test.go
- knownbadsignatures.go
- knownbadsignatures_test.go
- latentinjection.go
- latentinjection_test.go
- startswith.go
- triggerlist.go
- triggerlist_test.go
- lmrc.go
- lmrc_test.go
- malwaregen.go
- malwaregen_test.go
- contentinjection.go
- contentinjection_test.go
- mcpprimitive.go
- mcpprimitive_test.go
- mcpsecrets.go
- mcpsecrets_test.go
- authdifferential.go
- authdifferential_test.go
- authreview_test.go
- bola.go
- bola_test.go
- functionauthz.go
- mcptool.go
- mcptool_test.go
- pathtraversal.go
- pathtraversal_test.go
- ssrf.go
- ssrf_test.go
- tokenvalidation.go
- authreview_test.go
- mcptransport.go
- originvalidation.go
- originvalidation_test.go
- ssesession.go
- ssesession_test.go
- unauthenticated.go
- unauthenticated_test.go
- misleading.go
- misleading_test.go
- mitigation.go
- mitigation_test.go
- multiagent.go
- multiagent_test.go
- canary.go
- canary_test.go
- fuzzy_test.go
- pvalue.go
- pvalue_test.go
- dart.go
- dart_test.go
- generic.go
- generic_test.go
- go.go
- go_test.go
- npm.go
- npm_test.go
- packagechecker.go
- packagechecker_test.go
- perl.go
- perl_test.go
- pythonpypi.go
- pythonpypi_test.go
- rakuland.go
- rakuland_test.go
- rubygems.go
- rubygems_test.go
- rust.go
- rust_test.go
- pair.go
- pair_test.go
- config.go
- config_test.go
- patterns.go
- patterns_test.go
- config.go
- config_test.go
- perspective.go
- perspective_test.go
- harmjudge.go
- harmjudge_test.go
- win5x5.go
- win5x5_test.go
- promptinject.go
- promptinject_test.go
- config.go
- config_test.go
- ragpoison.go
- ragpoison_test.go
- ragpoisoning.go
- overthink.go
- reasoning.go
- reasoning_test.go
- schemattack.go
- schemattack_test.go
- shields.go
- shields_test.go
- snowball.go
- snowball_test.go
- tap.go
- tap_test.go
- toolcoercion.go
- toolcoercion_test.go
- toxic.go
- toxic_test.go
- ldnoobw-en.txt
- ofcom-potentially-offensive.txt
- profanity_en.csv
- ldnoobw.go
- ldnoobw_test.go
- ofcom_offensive.go
- ofcom_offensive_test.go
- slurs.go
- slurs_test.go
- surge_profanity.go
- surge_profanity_test.go
- figstep.go
- figstep_test.go
- detector.go
- detector_test.go
- markdown_exfil.go
- markdown_exfil_test.go
- xss.go
- xss_test.go
- verify_test.go
- atbash.go
- atbash_test.go
- braille.go
- braille_test.go
- camelcase.go
- charcode.go
- charcode_test.go
- emoji.go
- emoji_test.go
- encoding.go
- leet.go
- leet_test.go
- morse.go
- morse_test.go
- nato.go
- nato_test.go
- piglatin.go
- piglatin_test.go
- rot13.go
- rot13_test.go
- sneaky_bits.go
- sneaky_bits_test.go
- splitpunct_test.go
- unicode_tags.go
- unicode_tags_test.go
- zalgo.go
- zalgo_test.go
- anthropic.go
- anthropic_test.go
- config.go
- config_test.go
- messages.go
- messages_test.go
- anyscale.go
- anyscale.go.backup
- anyscale_test.go
- azure.go
- azure_test.go
- config.go
- config_test.go
- bedrock.go
- bedrock_test.go
- config.go
- config_test.go
- nova.go
- nova_test.go
- cohere.go
- cohere_test.go
- config.go
- config_test.go
- config.go
- config_test.go
- deepinfra.go
- deepinfra_test.go
- config.go
- config_test.go
- fireworks.go
- fireworks_test.go
- function.go
- function_test.go
- config.go
- gemini.go
- gemini_test.go
- config.go
- ggml.go
- ggml_test.go
- parts.go
- parts_test.go
- wire.go
- config.go
- groq.go
- groq_test.go
- nemoguardrails.go
- nemoguardrails_test.go
- inference.go
- inference_test.go
- inferenceendpoint.go
- inferenceendpoint_test.go
- llava.go
- llava_test.go
- pipeline.go
- pipeline_test.go
- hybrid.go
- hybrid_config.go
- hybrid_config_test.go
- hybrid_steps.go
- hybrid_test.go
- langchain.go
- langchain_test.go
- langchainserve.go
- langchainserve_test.go
- config.go
- config_test.go
- litellm.go
- litellm_test.go
- config.go
- config_test.go
- credentials.go
- credentials_test.go
- hardening_test.go
- headers_test.go
- mcp.go
- mcp_test.go
- pagination_test.go
- primitives.go
- primitives_test.go
- recon.go
- config.go
- mistral.go
- mistral_test.go
- config.go
- nemo.go
- nemo_test.go
- completion.go
- completion_test.go
- config.go
- multimodal.go
- multimodal_test.go
- nim.go
- nim_test.go
- nvcf.go
- nvcf_test.go
- config.go
- config_test.go
- ollama.go
- ollama_test.go
- config.go
- config_test.go
- openai.go
- openai_test.go
- reasoning.go
- reasoning_config.go
- reasoning_test.go
- audio.go
- audio_test.go
- base_config.go
- base_config_test.go
- compatgen_test.go
- conversation_test.go
- openaicompat.go
- openaicompat_test.go
- ratelimit.go
- README.md
- rasa.go
- rasa_test.go
- config.go
- config_test.go
- replicate.go
- replicate_test.go
- config.go
- config_test.go
- rest.go
- rest_test.go
- blank.go
- blank_test.go
- blankvision.go
- blankvision_test.go
- lipsum.go
- lipsum_test.go
- nones.go
- nones_test.go
- repeat.go
- repeat_test.go
- single.go
- single_test.go
- config.go
- config_test.go
- together.go
- together_test.go
- config.go
- config_test.go
- vertex.go
- vertex_test.go
- interface_test.go
- watsonx.go
- watsonx_test.go
- config.go
- config_test.go
- websocket.go
- websocket_test.go
- wsutil.go
- wsutil_proxy_test.go
- wsutil_test.go
- xai.go
- xai_test.go
- registration_test.go
- agentwise.go
- agentwise_test.go
- config.go
- config_test.go
- batch.go
- batch_test.go
- config.go
- config_test.go
- concurrent_test.go
- errored_precedence_test.go
- integration_test.go
- probewise.go
- probewise_test.go
- anonsession.go
- anonsession_test.go
- args.go
- args_test.go
- collector.go
- collector_test.go
- credentials.go
- declared.go
- declared_test.go
- destructive.go
- disclosed.go
- disclosed_test.go
- issued.go
- mcpprobe.go
- metadata.go
- refusal.go
- refused.go
- refused_test.go
- config.go
- config_test.go
- model_context_windows.yaml
- memory.go
- memory_test.go
- parse.go
- parse_test.go
- refusal.go
- refusal_test.go
- crescendo.go
- crescendo_test.go
- prompts.go
- goat.go
- goat_test.go
- prompts.go
- hcot.go
- prompts.go
- hydra.go
- hydra_test.go
- prompts.go
- mischievous.go
- mischievous_test.go
- prompts.go
- engine.go
- hooks.go
- hooks_test.go
- judge.go
- judge_test.go
- models.go
- models_test.go
- probe.go
- probeutil.go
- probeutil_test.go
- types.go
- types_test.go
- utils.go
- utils_test.go
- invoker.go
- store.go
- store_test.go
- TargetedPatch.yaml
- TransferPatch.yaml
- UniversalPatch.yaml
- advpatch.go
- advpatch_test.go
- generator.go
- parity_test.go
- templates.go
- ansiescape.go
- ansiescape_test.go
- payloads.go
- completekey.go
- completekey_test.go
- getkey.go
- getkey_test.go
- artprompts.go
- artprompts_test.go
- templates.go
- autodan.go
- autodan_test.go
- templates.go
- avspamscanning.go
- avspamscanning_test.go
- intentional.txt
- bidi.go
- bidi_test.go
- common.go
- config.go
- config_test.go
- deletions.go
- deletions_test.go
- homoglyphs.go
- homoglyphs_test.go
- invisible.go
- invisible_test.go
- accessibility.go
- accessibility_test.go
- zombais.go
- zombais_test.go
- slurprompts.jsonl
- slurprompts_mini.jsonl
- continuation.go
- continuation_test.go
- crescendo.go
- crescendo_test.go
- AntiDAN.yaml
- ChatGPT_Developer_Mode_RANTI.yaml
- ChatGPT_Developer_Mode_v2.yaml
- ChatGPT_Image_Markdown.yaml
- Dan_10_0.yaml
- Dan_11_0.yaml
- Dan_6_0.yaml
- Dan_6_2.yaml
- Dan_7_0.yaml
- Dan_8_0.yaml
- Dan_9_0.yaml
- DAN_Jailbreak.yaml
- DUDE.yaml
- STAN.yaml
- dan.go
- dan_test.go
- templates.go
- repeat.go
- repeat_test.go
- discrimination_exclusion_toxicity_hateful_offensive.txt
- human_chatbox.txt
- information_hazard.txt
- malicious_uses.txt
- misinformation_harms.txt
- donotanswer.go
- donotanswer_test.go
- harmful_behaviors.json
- letter_map.json
- moderation_cache.json
- prompt_templates.txt
- dra.go
- dra_test.go
- base.go
- exploitation.go
- jinja.go
- jinja_test.go
- payloads.go
- sql_echo.go
- sql_echo_test.go
- sql_system.go
- sql_system_test.go
- flipattack.go
- flipattack_test.go
- integration_test.go
- gcg.txt
- gcg.go
- gcg_test.go
- suffixes.go
- glitch.go
- glitch_probe_test.go
- glitch_test.go
- goat.go
- goat_test.go
- ChatMLExploit.yaml
- PayloadSplitting.yaml
- PoemExfiltration.yaml
- SystemPromptConfusion.yaml
- ThreatenJSON.yaml
- WhoIsRiley.yaml
- goodside.go
- goodside_test.go
- parity_test.go
- templates.go
- base.go
- grandma_test.go
- slurs.go
- substances.go
- win10.go
- win11.go
- framework.go
- framework_test.go
- techniques.go
- hcot.go
- hydra.go
- hydra_test.go
- LatentAgentConfig.yaml
- LatentExtraction.yaml
- LatentJailbreak.yaml
- LatentRefusal.yaml
- PayloadPropagation.yaml
- SemanticPropagation.yaml
- SummarizationResilient.yaml
- TagSmuggling.yaml
- latentinjection.go
- latentinjection_test.go
- templates.go
- book_cloze.tsv
- guardian_cloze.tsv
- nyt_cloze.tsv
- potter_cloze.tsv
- leakreplay.go
- leakreplay_test.go
- lmrc.go
- lmrc_test.go
- patterns.go
- malwaregen.go
- malwaregen_test.go
- credentialexposure.go
- credentialexposure_test.go
- riskinfo_test.go
- contentleak.go
- contentleak_test.go
- mcpprimitive.go
- mcpprimitive_test.go
- prompttemplateinjection.go
- prompttemplateinjection_test.go
- resourceinjection.go
- resourceinjection_test.go
- reviewfixes_test.go
- riskinfo_test.go
- authreview_test.go
- authz_nested_test.go
- authzfp_test.go
- bola.go
- bola_identity_test.go
- bola_test.go
- callshape_test.go
- canonical.go
- context_test.go
- functionauthz.go
- functionauthz_test.go
- injection.go
- injection_test.go
- mcptool.go
- observed_probe_test.go
- params_shim_test.go
- params_test.go
- pathtraversal.go
- pathtraversal_test.go
- policy_test.go
- readintent.go
- readintent_test.go
- recon_context.go
- refused_test.go
- responseleak.go
- responseleak_test.go
- reviewfixes_test.go
- riskinfo_test.go
- signatures.go
- ssrf.go
- ssrf_test.go
- tokenvalidation.go
- tokenvalidation_test.go
- mcptransport.go
- mcptransport_test.go
- oauthdiscovery.go
- oauthdiscovery_test.go
- originvalidation.go
- originvalidation_test.go
- riskinfo_test.go
- ssesession.go
- ssesession_test.go
- unauthenticated.go
- unauthenticated_test.go
- mischievous.go
- mischievous_test.go
- truefalse_falseclaims_50.txt
- misleading.go
- misleading_test.go
- config.go
- config_test.go
- coordinator.go
- framework.go
- framework_test.go
- orchestrator.go
- orchestrator_test.go
- figstep_canary.png
- instruction_canary1.png
- invisible_canary1.png
- metadata_canary.png
- metadata_exif_canary.jpg
- scaling_bicubic.png
- scaling_bilinear.png
- scaling_nearest.png
- scenetap_notebook.png
- scenetap_tshirt.png
- semantic_canary.png
- adaptive_lsb_canary.png
- dct_canary.png
- neural_canary.png
- stego_canary.png
- tinyfont_canary.png
- vsh_canary.png
- base.go
- base_test.go
- config.go
- config_test.go
- embed.go
- figstep.go
- instruction.go
- invisible.go
- metadata.go
- metadata_exif.go
- probe.go
- probe_construction_test.go
- run.go
- run_test.go
- scaling.go
- scenetap.go
- semantic.go
- stego.go
- stego_adaptive_lsb.go
- stego_dct.go
- stego_neural.go
- tinyfont.go
- vsh.go
- config.go
- config_test.go
- mutations.go
- obscureprompt.go
- obscureprompt_test.go
- base.go
- base_test.go
- config.go
- config_test.go
- dart.go
- javascript.go
- packagehallucination.go
- packagehallucination_test.go
- perl.go
- probes_test.go
- python.go
- python_test.go
- rakuland.go
- ruby.go
- rust.go
- PAIR.yaml
- PAIRBasic.yaml
- pair.go
- pair_config_test.go
- pair_test.go
- templates.go
- templates_test.go
- annotation_test.go
- metadata_test.go
- pdfbuild.go
- pdfbuild_test.go
- text_attacks_test.go
- annotation.go
- invisible.go
- metadata.go
- offpage.go
- onepointfont.go
- probe_construction_test.go
- probes.go
- future_tense_en.txt
- past_tense_en.txt
- data.go
- future_tense.go
- future_tense_test.go
- phrasing.go
- phrasing_test.go
- free_verse.txt
- haiku.txt
- limerick.txt
- rhyming_couplet.txt
- sonnet.txt
- harmful_payloads.txt
- payload_categories.txt
- base.go
- benchmark_test.go
- data.go
- free_verse.go
- haiku.go
- integration_test.go
- limerick.go
- poetry_test.go
- rhyming_couplet.go
- sonnet.go
- prefix.go
- prefix_test.go
- prefixes.go
- hijack.go
- hijack_test.go
- documents.go
- framework.go
- framework_test.go
- metadata.go
- metadata_test.go
- rtp_flirtation.txt
- rtp_identity_attack.txt
- rtp_insult.txt
- rtp_profanity.txt
- rtp_severe_toxicity.txt
- rtp_sexually_explicit.txt
- rtp_threat.txt
- realtoxicityprompts.go
- realtoxicityprompts_test.go
- AdversarialLogic.yaml
- DecisionHijack.yaml
- HCoT.yaml
- OverThink.yaml
- templates.go
- templates_test.go
- TrojanSchema.yaml
- templates.go
- templates_test.go
- graph_connectivity.json
- primality_testing.json
- senator_search.json
- snowball.go
- snowball_test.go
- Acrostic.yaml
- WordInitial.yaml
- templates.go
- templates_test.go
- gcg.txt
- gcg_cached.go
- gcg_cached_test.go
- TAPv1.yaml
- TAPv2.yaml
- tap.go
- tap_config_test.go
- tap_test.go
- templates.go
- blank.go
- blank_test.go
- test.go
- test_test.go
- AuthorityInjection.yaml
- CausalityLaundering.yaml
- DeprecationClaim.yaml
- HaystackDilution.yaml
- InstructionEmbed.yaml
- MCPToolPoison.yaml
- ParasiticChain.yaml
- SemanticLure.yaml
- templates.go
- templates_test.go
- chain_amplification.yaml
- confused_deputy_token_reuse.yaml
- cross_agent_propagation.yaml
- data_exfiltration.yaml
- function_calling_jailbreak.yaml
- indirect_return_exploitation.yaml
- mcp_supply_chain_poisoning.yaml
- memory_poisoning.yaml
- onboarding_poisoning.yaml
- parameter_injection.yaml
- parser_spoofing.yaml
- schema_mutation.yaml
- selection_hijacking.yaml
- unauthorized_invocation.yaml
- tooluse.go
- tooluse_test.go
- topic.go
- topic_test.go
- topictree.go
- treesearch.go
- treesearch_test.go
- payloads.go
- webinjection.go
- webinjection_test.go
- ConfigInjection.yaml
- templates.go
- templates_test.go
- iterative.go
- iterative_test.go
- llm.go
- llm_test.go
- identifiers.go
- identifiers_reader.go
- identifiers_reader_test.go
- identifiers_test.go
- inventory_reader.go
- inventory_reader_test.go
- mcp.go
- mcp_test.go
- mcpconfig.go
- mcpconfig_fifo_test.go
- mcpconfig_test.go
- generator.go
- toolpolicy.go
- toolpolicy_test.go
- call.go
- call_test.go
- param.go
- path.go
- signature.go
- signature_test.go
- source.go
- attempt.go
- attempt_test.go
- clone_independence_test.go
- conversation.go
- conversation_test.go
- message.go
- message_test.go
- metadata.go
- metadata_keys.go
- multimodal.go
- multimodal_test.go
- base.go
- buff.go
- buff_test.go
- chain.go
- chain_test.go
- coverage_test.go
- integration_test.go
- prober.go
- prober_test.go
- flags.go
- flags_test.go
- config.go
- config_test.go
- koanf_loader.go
- koanf_loader_test.go
- loader.go
- resolve.go
- resolve_test.go
- detector.go
- generator.go
- detection.go
- detection_test.go
- harness.go
- gen_caps.go
- generator.go
- generator_test.go
- hooked_caps_gen.go
- hooks.go
- hooks_test.go
- client.go
- client_test.go
- embed.go
- embed_test.go
- logging.go
- logging_test.go
- prometheus.go
- prometheus_test.go
- output.go
- prefilter.go
- prefilter_test.go
- embed.go
- embed_test.go
- probe.go
- probe_test.go
- run.go
- run_test.go
- simple.go
- simple_test.go
- http.go
- http_test.go
- limiter.go
- limiter_test.go
- context.go
- orchestrate.go
- orchestrate_test.go
- recon.go
- recon_test.go
- runner.go
- store.go
- buffs.go
- detectors.go
- generators.go
- harnesses.go
- probes.go
- recons.go
- generate.go
- register.go
- cache.go
- cache_test.go
- config_helpers.go
- config_helpers_test.go
- options.go
- options_test.go
- registry.go
- registry_test.go
- html.go
- html_test.go
- jsonl.go
- jsonl_test.go
- metadata_test.go
- results.go
- results_test.go
- stream.go
- stream_test.go
- verdict_test.go
- retry.go
- retry_test.go
- options.go
- scanner.go
- scanner_test.go
- invalid-cwe.yaml
- invalid-mitre.yaml
- invalid.yaml
- test.yaml
- integration_test.go
- loader.go
- loader_test.go
- probe.go
- probe_test.go
- types.go
- types_test.go
- validation_test.go
- context.go
- detector.go
- generator.go
- mcp_endpoint.go
- mcp_primitives.go
- mcp_recon.go
- mcp_recon_test.go
- prober.go
- README.md
- tool_invoker.go
- flipattack_wordorder.yaml
- drift_test.go
- main.go
- render_test.go
- scan.go
- scan_test.go
- .gitignore
- generate.py
- make_rebus.py
- manifest.py
- requirements.txt
- techniques.py
- verify.py
- .gitignore
- .golangci.yml
- .goreleaser.yaml
- .graphifyignore
- AGENTS.md
- CHANGELOG.md
- CLAUDE.md
- CODE_OF_CONDUCT.md
- CONTRIBUTING.md
- FOLLOWUPS.md
- go.mod
- go.sum
- LICENSE
- Makefile
- README.md
- SECURITY.md
# Installation Guide
1. Get the code
git clone https://github.com/praetorian-inc/augustus
Downloads the entire project code from GitHub to your computer.
cd augustus
Moves into the project folder you just downloaded.
2. Official Install Script
Easy RecommendedPrerequisites
- Go Go is required to use go install.
go install github.com/praetorian-inc/augustus/cmd/augustus@latest
Downloads and installs the specified version directly — no need to clone the repo yourself.
After installing, open a new terminal and run the program's version command (e.g. --version) to confirm it worked.
Pulled directly from this repo's README.
3. Python
EasyPrerequisites
--buff poetry.MetaPrompt \
Type this command into your terminal and run it.
If it runs without errors and prints output in the terminal, it worked.
Pulled directly from this repo's README.
4. Go
MediumPrerequisites
go install github.com/praetorian-inc/augustus/cmd/augustus@latest
Downloads and installs the specified version directly — no need to clone the repo yourself.
If the build finishes without errors, it worked. If you used go run ., check the terminal output.
Pulled directly from this repo's README.
5. Make
MediumPrerequisites
- Git Needed to download the project code from GitHub.
- Make Usually pre-installed on Linux/macOS. On Windows, install separately (e.g. via MSYS2 or WSL).
make build
Compiles the code based on the generated build configuration to produce an executable.
make test
Compiles the code based on the generated build configuration to produce an executable.
make install
Compiles the code based on the generated build configuration to produce an executable.
make devpod-up-cpu
Compiles the code based on the generated build configuration to produce an executable.
make devpod-up-gpu
Compiles the code based on the generated build configuration to produce an executable.
If it finishes without errors, it worked. Try running the generated executable directly.
Pulled directly from this repo's README.
// repository documentation
Was this content helpful?
(0 ratings)