Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Continuously discover, verify, and exploit real vulnerabilities across your model, APIs, tools, and agent workflows and not just the model. Evidence-backed findings with severity scoring, regression re-testing, and mappings to OWASP, MITRE ATLAS, and EU AI Act/GDPR/NIST AI RMF.