Prompt-injection & jailbreak testing

How it works

Prompt injection is the defining security failure mode of LLM applications. Testing covers direct injection (the user tries to override the system prompt) and indirect injection (malicious instructions hidden in documents, web pages, or tool outputs the model ingests). For agentic systems this is the highest-severity surface.

When to use it

Any system that ingests untrusted content (RAG, browsing, email, tool outputs) or grants the model side effects.

Limitations

The attack space is open-ended; a clean test run is not proof of safety. Per Qlarify Labs policy, live payloads are redacted in published findings.

Cite this