Core Concepts
Understand the fundamentals of ZeroShot security scanning.
Scans
A Scan is a security assessment of an AI system. When you create a scan, ZeroShot sends a series of attack prompts to your target and analyzes the responses.
scan = client.scans.create(
target="https://api.example.com/v1/chat",
categories=["jailbreak", "prompt_injection"],
max_attacks=100,
)Attack Categories
| Category | Description | Severity |
|---|---|---|
jailbreak | Attempts to bypass safety restrictions | High |
prompt_injection | Injects malicious instructions | Critical |
system_prompt_extraction | Extracts hidden system prompts | Medium |
data_exfiltration | Attempts to leak sensitive data | High |
pii_leak | Tests for PII disclosure | High |
Vulnerabilities
When an attack succeeds, ZeroShot creates a Vulnerability record with:
- Attack details (prompt, category)
- Response from the AI
- Severity rating
- Compliance mappings (OWASP LLM, MITRE ATLAS)