Metadata-Version: 2.4
Name: crimsonguard
Version: 0.1.2
Summary: Trust and assurance tool for AI — apply NIST AI RMF and ISO/IEC 42001 to LLMs and MCP servers.
Project-URL: Homepage, https://crimsonguard.the-s-lab.com
Author: the-s-lab
License: Proprietary — see LICENSE
License-File: LICENSE
License-File: NOTICE
Keywords: ai-security,compliance,iso-42001,llm-security,mcp,nist-ai-rmf,oscal,red-team
Classifier: Development Status :: 3 - Alpha
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: Information Technology
Classifier: License :: Other/Proprietary License
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Quality Assurance
Requires-Python: >=3.11
Requires-Dist: anthropic>=0.40
Requires-Dist: httpx>=0.27
Requires-Dist: mcp>=1.0
Requires-Dist: openai>=1.40
Requires-Dist: pydantic>=2.6
Requires-Dist: pyyaml>=6.0
Requires-Dist: rich>=13
Requires-Dist: typer>=0.12
Provides-Extra: all
Requires-Dist: presidio-analyzer>=2.2; extra == 'all'
Requires-Dist: weasyprint>=62; extra == 'all'
Provides-Extra: dev
Requires-Dist: mypy>=1.11; extra == 'dev'
Requires-Dist: pytest-asyncio>=0.23; extra == 'dev'
Requires-Dist: pytest-cov>=5; extra == 'dev'
Requires-Dist: pytest>=8; extra == 'dev'
Requires-Dist: ruff>=0.6; extra == 'dev'
Requires-Dist: types-pyyaml>=6.0; extra == 'dev'
Provides-Extra: pdf
Requires-Dist: weasyprint>=62; extra == 'pdf'
Provides-Extra: pii
Requires-Dist: presidio-analyzer>=2.2; extra == 'pii'
Description-Content-Type: text/markdown

# CrimsonGuard

> Trust your AI. Prove it.

CrimsonGuard applies **NIST AI RMF 1.0** and **ISO/IEC 42001:2023** to
LLMs and MCP servers, and produces auditor-ready evidence (OSCAL
`assessment-results` + PDF) mapped to standard controls.

## Two audit modes

- **LLM mode** — adversarial probes against LLM-powered AI:
  hallucination, prompt injection, PII leakage, and more.
- **MCP mode** — security audit against MCP tool servers: indirect
  prompt injection via tool output, input validation, authorization
  boundary, audit-log completeness.

Every finding is tagged to NIST AI RMF subcategories, ISO/IEC 42001
Annex A controls, OWASP GenAI Top 10 items, MITRE ATLAS techniques,
and classical CWE weaknesses — so you get technical findings *and*
compliance evidence in one scan.

## Install

```bash
pip install crimsonguard
```

Python 3.11 or newer.

## Quick start

```bash
# Audit an MCP server (stdio)
crimsonguard scan-mcp \
  --command "python -m your_mcp_server" \
  --output scan.json

# Audit an LLM endpoint
crimsonguard scan-llm \
  --provider openai --model gpt-4o-mini \
  --output scan.json

# Generate JSON, OSCAL, HTML, PDF reports from a scan
crimsonguard report \
  --input scan.json \
  --format json,oscal,pdf \
  --output ./reports/
```

## Licensing

CrimsonGuard is **proprietary software**. See [`LICENSE`](./LICENSE) for
the full license. The distribution also includes a [`NOTICE`](./NOTICE)
file listing third-party open-source components and their licenses.

For commercial licensing, enterprise deployment, or custom engagements
contact **crimsonguard@the-s-lab.com**.

## About

Built by [the-s-lab](https://the-s-lab.com) — trustworthy AI for
process engineering and safety-critical industries.
