About Compliant Llm
Compliant LLM is a toolkit for testing the security and compliance of AI systems, aimed at infosec, compliance and generative AI teams. It can test prompts, agents, MCP servers and models, and reports results against frameworks such as NIST, ISO, HIPAA and GDPR.
Key features
- 01Security testing with 8+ attack strategies
- 02Compliance analysis against NIST, ISO, OWASP and GDPR
- 03Multiple LLM providers supported via LiteLLM
- 04Visual dashboard and detailed reports
Use cases
- 01Testing AI agents for prompt injection and jailbreaking
- 02Checking AI systems against internal policies and frameworks
- 03Running security tests against MCP servers
MCP support
The project can test MCP servers for security and compliance; its roadmap lists planned compliant and logged MCP servers.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
We haven’t collected a package or remote endpoint for this server. Follow the instructions in the project README.
Tools
Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.
Details
From the project README
Compliant LLM is your comprehensive toolkit for ensuring compliance and security of your AI systems.
Infosec, compliance, and gen AI teams use compliant-llm to ensure that their AI agents are secure and compliant with internal policies and frameworks like NIST, ISO, HIPAA, GDPR, etc.
It supports multiple LLM providers, and can be used to test prompts, agents, MCP servers and GenAI models.
Go through our documentation for more details.
🎯 Key Features
- 🎯 Security Testing: Test against 8+ attack strategies including prompt injection, jailbreaking, and context manipulation
- 📊 Compliance Analysis: Ensure the compliance of your AI systems against NIST, ISO, OWASP, GDPR, HIPAA and other compliance frameworks
- 🤖 Provider Support: Works with multiple LLM providers via LiteLLM
- 📈 Visual Dashboard: Interactive UI for analyzing test results
- ⚡ End to End Testing: Test your AI systems end to end
- 📄 Detailed Reporting: Comprehensive reports with actionable insights
⚙️ Install and Run
# install
pip install compliant-llm
# run the dashboard
compliant-llm dashboard
Configure your LLM provider and run attacks

Support
Contact: [email protected]
Meet: 🔗 Find a slot
Community: 💬 Discord, X, LinkedIn
Self-hosted or hosted cloud: Book a demo
Supported Providers
- OpenAI
- Anthropic
- Gemini
- Mistral
- Groq
- Deepseek
- Azure
- vLLM Ollama
- Ollama
- Nvidia Nim
- Meta Llama
Roadmap
- Full Application Pen Testing
- Compliant and Logged MCP Servers
- Support different Compliance Frameworks - NIST, HIPAA, GDPR, EU AI Act, etc.
- Multimodal Testing
- CI/CD
- Access Control checks
- Control Pane for different controls
- Internal audits and documentation
⭐️ Star us

🤝 Contributors
| Developers | Contributors |
|---|---|
Those who build with compliant-llm. | Those who make compliant-llm better. |
(You have import compliant-llm somewhere in your project) | (You create a PR to this repo) |
We welcome contributions from the community! Whether it's bug fixes, feature additions, or documentation improvements, your input is valuable.
- Fork the repository
- Create your feature branch (git checkout -b feature/AmazingFeature)
- Commit your changes (git commit -m 'Add some AmazingFeature')
- Push to the branch (git push origin feature/AmazingFeature)
- Open a Pull Request
🔒 Security & Privacy
We take data security and privacy seriously. Please refer to our Security and Privacy page for more information.
Telemetry
Compliant LLM tracks anonymized usage statistics to improve the product. No private or personally identifiable information is tracked.
You can opt-out by setting export DISABLE_COMPLIANT_LLM_TELEMETRY=true.
📝 Cite Us
@misc{compliant_llm2025, author = {FiddleCube}, title = {Compliant LLM: Build Secure AI agents and MCP Servers}, year = {2025}, howpublished = {\url{<https://github.com/fiddlecube/compliant-llm}}>, }
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.