install

Additional install commands

macOS

Homebrewverified · 100%

brew install humanbound

local Homebrew formula metadata

overview

Package summary

Adversarial security testing engine, SDK, and CLI for AI agents

Project links

Homepage

Commands and aliases

hb

history

Project history and usage

Humanbound is an open-source adversarial testing engine, Python SDK, and hb command-line interface for AI agents. It drives multi-turn attacks against live agent endpoints, evaluates failures, and can turn findings into runtime guardrail rules.

Project history

The official Humanbound repository was created in February 2026 and is maintained by the verified Humanbound GitHub organization. The project combines an Apache-licensed local engine with an optional hosted platform, allowing initial testing without a login while preserving a path to managed posture tracking.

The official release notes describe a consolidation around the humanbound PyPI package: the earlier humanbound-cli package was yanked, and the CLI and public SDK now ship together. The same repository also integrates with the sibling humanbound-firewall package for a test-to-guardrail workflow.

Adoption history

Humanbound is a young project, so its reliable adoption history is limited. Official materials show distribution through PyPI, Homebrew in the supplied package facts, and an official GitHub Action for security gates in continuous integration.

How it is used

Users describe an agent endpoint in a JSON configuration file and optionally define permitted and restricted behavior in a scope file. The hb test command runs attacks locally or through the platform; hb posture, hb logs, and hb report inspect the results.

Local attack generation and judging can use OpenAI, Anthropic, Gemini, Azure OpenAI, Grok, or Ollama. Provider settings resolve from CLI flags, environment variables, and then ~/.humanbound/config.yaml; platform login credentials are stored under ~/.humanbound/.

Why package nerds care

Humanbound is notable as an AI-security tool that packages an engine, SDK, and CLI under one Python distribution while keeping the firewall as a composable sibling package. Its optional extras let package users choose the provider engine, firewall runtime, or both.

Timeline

2026: The official humanbound/humanbound repository was created.
2026: The project consolidated the CLI and SDK in the humanbound PyPI package and yanked the older humanbound-cli package.
2026: The official release feed reached the v2.7 series.

Related projects

humanbound-firewall is the sibling Apache-licensed runtime that deploys rules generated from Humanbound findings.
humanbound/actions is the official GitHub Action for running Humanbound checks in CI.

Sources

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for humanbound. Nucleus package metadata is still published here so future coverage has a stable package URL.

Install behavior

No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: ~/.humanbound/config.yaml

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: ~/.humanbound/

executables

Installed executables

Command	Kind	Exposure	Note
`hb`	executable	indexed executable	Discovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03

manager version2.8.0

manager updated2026-07-31

local dataunknown

upstreamnot available

latest detectednot detected

okNo freshness warnings were generated.

install metadata

Package metadata

Package key	brew:humanbound
Version	2.8.0
Package manager	Homebrew
Homepage	https://docs.humanbound.ai/
Last updated	2026-07-31T00:17:01Z
Pulse	updated
Bottle	not recorded
Service	none declared

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/humanbound.yml

Used sources

cross-ecosystem install command graph
curated configuration and credential file locations
curated package history
pkg.so package database

Install humanbound with Homebrew