Choose your quickstart
Red-team an agent
Best for: teams that want to know how an agent breaks under attack.Connect an endpoint, approve a plan, and read the results. About 15 minutes, with a sample agent included.
Trace an agent
Best for: teams that want to see every prompt, tool call, and span behind a result.Use the Python SDK or any OpenTelemetry exporter. About 5 minutes.
How the pieces fit together
A red-team run tells you what broke. Tracing shows how the agent got there. Once you’ve fixed the agent, replaying the attack confirms the fix.Find your way
Explore the docs
Get started
Core concepts and account setup.
Red teaming
Connect, recon, plan, run, and read results.
Tracing
Sessions, turns, agents, and spans over OpenTelemetry.
Integrations
Eleven frameworks, plus any OTLP exporter.
Platform
Organizations, workspaces, projects, roles, keys, and secrets.
Reference
CLI commands and environment variables.
Common questions
Do I need to change my agent's code?
Do I need to change my agent's code?
For red teaming, no. BotGauge needs only your agent’s endpoint, and a small optional wrapper unlocks deeper tests. See black box and grey box. For tracing, the zero-code launcher traces a Python app without edits.
Is it safe to run against my agent?
Is it safe to run against my agent?
BotGauge never attacks until you approve a specific plan, it acts only within the scope you approved, and it refuses real actions in production. See Approve and run.
Which frameworks are supported?
Which frameworks are supported?
LangChain, LangGraph, OpenAI SDK, Anthropic SDK, LlamaIndex, CrewAI, OpenAI Agents, Google ADK, AutoGen AgentChat, PydanticAI, and MCP. Any other OpenTelemetry source can send traces through OTLP.
Does a clean report mean my agent is secure?
Does a clean report mean my agent is secure?
No. It means the tested rules held under the attacks tried. Only a result of Held is a pass, and a rule that couldn’t be tested is a gap, not safety. See Read your results.
Where do my keys and secrets live?
Where do my keys and secrets live?
Tracing uses project API keys. Red teaming reads credentials your agent needs from project secrets, and BotGauge never shows the values back.
See BotGauge in action
Get a 30-minute walkthrough of red teaming and tracing for your agent.
The tracing SDK is an early release (0.x). Public API shapes may still change before 1.0.
.png?fit=max&auto=format&n=rExdh2xAS2_ywWU5&q=85&s=2336659947d2543be68f95bf2d539b85)