Hands-on playbook · 60 min
promptfoo Playbook: Security Regression Tests, Red Teaming Your Own Endpoint and CI Gates
A hands-on promptfoo deep dive: write security assertions that run offline, point the HTTP provider at your own endpoint safely, build a red team config from your product's purpose, control the grader and where data goes, and gate pull requests on exit codes. Every config was validated or run on promptfoo 0.125.1.
- Write deterministic security assertions and run them offline in minutes
- Point the HTTP provider at your own endpoint without grading error pages as answers
- Build a red team config from your product's purpose, plugins and strategies
- Choose the grader deliberately and keep test data on your own infrastructure
- Fail CI on exit code 100 and read results.stats for a quality gate
- Run a nightly red team and a fast pull request suite without flaky builds
- Fix the false positives that come from a vague purpose
- 01Under the hood
- 02Hands-on lab
- 03Recipes
- 04Writing must-never tests that hold up
- 05Rollout runbook
- 06Troubleshooting
- 07Interview drill
- 08Sources
Every worked answer in all 17 topics, every lesson in every course, the full concept curriculum, hands-on tool playbooks, the complete practice-test bank, and the downloadable security field guides.
6 months · One payment · No auto-renewal
An independent playbook for interview preparation and learning. AISecurityInterviews is not affiliated with or endorsed by promptfoo (agreed acquisition by OpenAI, announced March 2026; open source, MIT), and product names are trademarks of their owners. Use these procedures only on systems you own or are authorised to test, and check the vendor's documentation before changing production.