Sharing a few LLM security resources we built while testing AI APIs

We've been working on PromptBrake — an automated scanner that runs security tests against LLM-powered API endpoints. Along the way, we ended up building a few standalone tools that might be useful even outside of it:

• LLM Security Checklist Builder — a practical release checklist covering prompt injection, tool permissions, data exposure, and output controls

• Prompt Injection Payload Generator — generates direct, indirect, and multi-turn injection payloads you can adapt for testing your own endpoint

• OWASP LLM Test Case Mapper — translates OWASP LLM Top 10 risks into concrete test ideas with ownership guidance

All three are free and don't require an account: promptbrake.com/free-tools

We built these to give back to the community that's been sharing knowledge in this space. LLM security is still early, and a lot of teams aren't sure what they might be missing — figured it's better to make this kind of stuff accessible rather than gate it.

Curious how others here are approaching this — do you have a repeatable process before shipping LLM features, or is it still mostly ad hoc?