Metadata-Version: 2.4
Name: crimsonguard
Version: 0.1.0
Summary: Trust and assurance tool for AI — apply NIST AI RMF and ISO/IEC 42001 to LLMs and MCP servers.
Project-URL: Homepage, https://crimsonguard.the-s-lab.com
Project-URL: Repository, https://github.com/the-s-lab/crimsonguard
Project-URL: Issues, https://github.com/the-s-lab/crimsonguard/issues
Author: the-s-lab
License: Apache-2.0
License-File: LICENSE
Keywords: ai-security,compliance,iso-42001,llm-security,mcp,nist-ai-rmf,oscal,red-team
Classifier: Development Status :: 3 - Alpha
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: Information Technology
Classifier: License :: OSI Approved :: Apache Software License
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Quality Assurance
Requires-Python: >=3.11
Requires-Dist: anthropic>=0.40
Requires-Dist: httpx>=0.27
Requires-Dist: mcp>=1.0
Requires-Dist: openai>=1.40
Requires-Dist: pydantic>=2.6
Requires-Dist: pyyaml>=6.0
Requires-Dist: rich>=13
Requires-Dist: typer>=0.12
Provides-Extra: all
Requires-Dist: presidio-analyzer>=2.2; extra == 'all'
Requires-Dist: weasyprint>=62; extra == 'all'
Provides-Extra: dev
Requires-Dist: mypy>=1.11; extra == 'dev'
Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'
Requires-Dist: pytest-cov>=5; extra == 'dev'
Requires-Dist: pytest>=8; extra == 'dev'
Requires-Dist: ruff>=0.6; extra == 'dev'
Requires-Dist: types-pyyaml>=6.0; extra == 'dev'
Provides-Extra: pdf
Requires-Dist: weasyprint>=62; extra == 'pdf'
Provides-Extra: pii
Requires-Dist: presidio-analyzer>=2.2; extra == 'pii'
Description-Content-Type: text/markdown

# CrimsonGuard

> Trust your AI. Prove it.

CrimsonGuard applies **NIST AI RMF 1.0** and **ISO/IEC 42001:2023** to make AI systems reliable, safe, and secure. It produces auditor-ready evidence (OSCAL `assessment-results` + PDF) mapped to standard controls.

## Two audit modes

- **LLM mode** — adversarial probes against LLM-powered AI: hallucination, prompt injection, PII leak, bias, and more.
- **MCP mode** — security audit against MCP tool servers: indirect prompt injection via tool output, input validation, authz boundary, audit log completeness.

Every finding is tagged to NIST AI RMF subcategories, ISO/IEC 42001 Annex A controls, OWASP GenAI Top 10, and MITRE ATLAS techniques — so you get technical findings *and* compliance evidence in one scan.

## Status

Early development (v0.0.1, alpha). Public v0.1 target: ~6 weeks.

## Install (once released)

```bash
pip install crimsonguard
```

## Quick start (planned)

```bash
# Audit an MCP server
crimsonguard scan-mcp --target bfd-gen --profile process-safety

# Audit an LLM endpoint
crimsonguard scan-llm --target https://api.openai.com --model gpt-4o-mini

# Generate OSCAL + PDF report
crimsonguard report --scan-id <id> --format oscal,pdf
```

## License

Apache-2.0. See [LICENSE](LICENSE).

## About

Built by [the-s-lab](https://the-s-lab.com) — trustworthy AI for process engineering and safety-critical industries.
