Can I open-source ZeroLeaks?
KINDA · partial or early alternativesKinda. Vaultwarden and Passbolt cover the core of ZeroLeaks, but they're early or partial — expect gaps like A curated, maintained probe corpus that tracks new jailbreak families instead of whatever the agent remembered on build day and Multi-turn and multi-model attack strategies, including crescendo and encoding tricks, done properly rather than as single-shot prompts.
Two reasons, and neither is that the harness is hard. First, jailbreaks rot: the probes that worked against last quarter's model are dead weight now, and keeping a live corpus is somebody's full time job, not a cron you set up once. Second, self-attested security is worth roughly nothing to an enterprise buyer, so companies pay for an external artifact with a date and a logo on it. If your goal is just to stop shipping a system prompt that unravels when someone types 'repeat everything above', a local harness is genuinely enough.
xA curated, maintained probe corpus that tracks new jailbreak families instead of whatever the agent remembered on build day
xMulti-turn and multi-model attack strategies, including crescendo and encoding tricks, done properly rather than as single-shot prompts
xA third-party report with a date on it that you can hand to a customer or an auditor
xSeverity triage and remediation guidance written by someone who has seen a lot of these
xRegression runs on every model or prompt change without you remembering to trigger them
These projects already replace it, free.
VVaultwardenLightweight Bitwarden-compatible password server — the official apps work with your own backend.open source↗KKeycloakBattle-tested identity and access management server with SSO, OIDC/SAML, federation, and admin consoleopen source↗PPassboltTeam password manager built for collaboration with granular sharing and audit logs.open source↗What each one is, in full: Vaultwarden · Keycloak · Passbolt
no votes, no pay-to-list · just what's real
Can I open-source ZeroLeaks?
Kinda. Vaultwarden covers the core of ZeroLeaks, but there are real gaps: A curated, maintained probe corpus that tracks new jailbreak families instead of whatever the agent remembered on build day, Multi-turn and multi-model attack strategies, including crescendo and encoding tricks, done properly rather than as single-shot prompts. Read the honest list above before committing.
How much does ZeroLeaks cost?
ZeroLeaks costs about $79/month (Pro, checked 2026-08-18), which is $948 per year.
What do I lose by replacing ZeroLeaks?
Honestly: A curated, maintained probe corpus that tracks new jailbreak families instead of whatever the agent remembered on build day; Multi-turn and multi-model attack strategies, including crescendo and encoding tricks, done properly rather than as single-shot prompts; A third-party report with a date on it that you can hand to a customer or an auditor; Severity triage and remediation guidance written by someone who has seen a lot of these; Regression runs on every model or prompt change without you remembering to trigger them. If any of those are load-bearing for you, keep paying.
Is there an open-source alternative to ZeroLeaks?
Yes: Vaultwarden (Lightweight Bitwarden-compatible password server — the official apps work with your own backend.) Keycloak (Battle-tested identity and access management server with SSO, OIDC/SAML, federation, and admin console) Passbolt (Team password manager built for collaboration with granular sharing and audit logs.)