AI Defense Matrix Catalog

Giskard

Visit official site ↗

Overview

Product details compiled from public sources, each with a citation.

Vendor
Giskard1
Description
Open-source and commercial AI testing platform that red-teams LLMs and ML models with adversarial probes for prompt injection, hallucination, and sensitive-information disclosure.1
Deployment
SaaS, Self-hosted1
Status
Active1
Compliance
SOC 2 Type 21 (company-level, see Methodology)

Matrix Coverage

Where this product defends, by asset class and NIST CSF function. The Coverage column shows whether each asset is Primary, Secondary, or Adjacent to what the product does. The table omits empty rows and columns.

Asset class Detect Coverage
AI Model Primary 1

Framework Relevance

These frameworks include controls relevant to the asset classes Giskard defends. This is an editorial inference from the AI Defense Matrix asset-level crossmap, not a statement that Giskard implements these controls or is certified against them.

Expand Collapse
Framework Asset class Relevant controls
NIST IR 8596 AI Model Models; Algorithms (model configuration)
CSA AI Controls Matrix AI Model Model Security; Governance, Risk and Compliance
ISO 42001 AI Model A.6 AI system life cycle; A.10 Third-party and customer relationships; A.5 Assessing impacts of AI systems
Google SAIF AI Model Protect the AI model; ensure model integrity, provenance, and weight security
SANS Critical AI Security Guidelines AI Model Conventional Security Controls (protect model parameters with least privilege, encryption at rest, runtime obfuscation, and trusted execution environments); Data/Model Engineering Controls (adversarial training; alignment and fine-tuning); AI Supply Chain Management (public-model caution; transfer-attack exposure)
MITRE ATLAS AI Model AML.T0043 Craft Adversarial Data; AML.T0024 Exfiltration via AI Inference API (subtechniques: AML.T0024.001 Invert AI Model and AML.T0024.002 Extract AI Model); AML.T0018 Manipulate AI Model (integrity and backdoor)
OWASP AI Exchange AI Model Development-time and runtime model threats: model inversion, extraction, evasion, poisoning
OWASP LLM Top 10 AI Model LLM03 Supply Chain; LLM04 Data and Model Poisoning; LLM09 Misinformation
OWASP Agentic Security Top 10 AI Model ASI04 Agentic Supply Chain Vulnerabilities (model provenance, weights, and dynamic loading)

Provenance

Last sourced 2026-06-09.

Expand Collapse

Sources

  1. Giskard AI red teaming and LLM security
    Vendor source accessed 2026-06-13
    • “we offer native GDPR adherence alongside SOC 2 Type II and HIPAA compliance”
    • “It provides an intuitive UI, powerful APIs, and seamless workflow integration for production-ready evaluation.”

Changelog

  1. Added to the catalog from the Giskard documentation.

Found an error? Corrections are welcome. Suggest an edit.