The Story

OpenAI has announced that it plans to acquire Promptfoo, an AI security platform focused on helping enterprises identify, test, and remediate vulnerabilities in AI systems during development. Once the acquisition closes, OpenAI says Promptfoo’s technology will be integrated into OpenAI Frontier, its platform for building and operating AI coworkers.

What Promptfoo brings

• AI security testing: Promptfoo is known for tools that help teams evaluate and red-team LLM applications before deployment.
• Enterprise adoption: OpenAI says Promptfoo is trusted by more than 25% of Fortune 500 companies.
• Open-source footprint: Promptfoo also maintains a widely used open-source CLI and library for evaluating and testing AI systems.

What OpenAI plans to do

• Native security inside Frontier: OpenAI says Promptfoo’s capabilities will become part of the Frontier platform to help enterprises test for prompt injections, jailbreaks, data leaks, tool misuse, and other unsafe agent behaviors.
• Earlier risk detection: The goal is to make security and evaluation part of the normal AI development workflow rather than a later add-on.
• Governance and oversight: OpenAI also highlighted reporting, traceability, and compliance support as key parts of the integration.

What Promptfoo says this means

In its own announcement, Promptfoo said it agreed to be acquired by OpenAI and that the team will continue supporting users and customers through the transition. The company also said its open-source suite will remain active and continue supporting a broad range of models and providers.

Why it matters

As enterprises move from chatbot experiments to more connected AI agents, security testing and evaluation are becoming core requirements. This deal shows OpenAI placing greater emphasis on platform-level trust, governance, and red-teaming as businesses deploy AI into real workflows.

For the broader AI market, the acquisition also signals that evaluation and security tooling is becoming a strategic layer of the enterprise AI stack, not just a developer-side utility.