# Evaluate LLM guardrail, testing and monitoring tools

How to test guardrail, red-teaming, bias-testing and monitoring tools before you buy, using the OWASP Top 10 for LLM Applications 2025, the NIST AI RMF and EU AI Act deployer duties.

- Level: Specialist
- Length: 80 minutes
- Exam questions: 9, pass mark 80%, up to 3 attempts
- Certificate: valid for 12 months

## What you will learn

- Use the OWASP Top 10 for LLM Applications 2025 as the base of a test plan and ask vendors to map their tests to it.
- Test a guardrail or red-teaming tool on your own traffic for coverage, latency and false positives.
- Check open-source licences before you build on a project.
- Set monitoring, logging and oversight that support EU AI Act deployer and transparency duties.
- Apply sector rules such as SR 26-2, NYC Local Law 144 and Colorado SB26-189 to a release decision.

## Lessons

1. [The OWASP Top 10 for LLM Applications 2025](https://aigovernancetools.fyi/academy/evaluate-llm-guardrail-and-testing-tools/owasp-llm-top-10-for-buyers.md) (18 minutes)
2. [Test guardrail and red-teaming tools](https://aigovernancetools.fyi/academy/evaluate-llm-guardrail-and-testing-tools/test-guardrails-and-red-teaming-tools.md) (20 minutes)
3. [Monitoring, logs and deployer duties](https://aigovernancetools.fyi/academy/evaluate-llm-guardrail-and-testing-tools/monitoring-logs-and-deployer-duties.md) (20 minutes)
4. [Sector rules and the release decision](https://aigovernancetools.fyi/academy/evaluate-llm-guardrail-and-testing-tools/sector-rules-and-the-release-decision.md) (22 minutes)

## Questions

### Is the OWASP Top 10 for LLM Applications a standard?

No. It is a list of the main risks for LLM and generative AI applications from the OWASP GenAI Security Project. It is a good base for a test plan. The course uses the 2025 version.

### Does the certificate show that I or a tool meet a standard?

No. It is a certificate of completion from this site and records that you passed the exam. It is not a licence, an accreditation or a product approval, and it replaces neither a security review nor legal advice.

### Do I need to run the open-source tools myself?

No. The course names some open-source projects so you can compare build and buy. You can run the tests yourself, ask a vendor to run them, or both.

Also on the [web page](https://aigovernancetools.fyi/academy/evaluate-llm-guardrail-and-testing-tools).