Research explained
OpenAI announced plans to acquire Promptfoo for AI security testing
The March 2026 announcement concerned a security-testing business and its open-source tools, not a privilege-escalation incident.
What happened
Promptfoo announced in March 2026 that it had agreed to be acquired by OpenAI. Its founders said the open-source project would continue and that its evaluation and security technology would be developed within OpenAI.
This is an acquisition announcement, not evidence of a flaw in Promptfoo or a guarantee that automated testing finds every application risk. Adoption figures in the announcement are company-reported.
For teams using evaluation tools, the practical questions are continuity, data handling and reproducibility. Keep tests tied to your application’s real permissions and preserve a record of the scenarios and evidence behind each finding.
Next step
Review tool continuity and data handling while maintaining reproducible application tests.
What remains unknown
- Open question
- The sources reviewed do not establish whether your deployment was exploited.
Source references
-
WWWwww.promptfoo.dev OpenAI announced plans to acquire Promptfoo for AI security testing