# Install humanbound with Homebrew

Adversarial security testing engine, SDK, and CLI for AI agents. Version 2.8.0 via Homebrew; verified 2026-07-31.

## Install

```sh
sudo av install brew:humanbound
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install humanbound
```

  Evidence: local Homebrew formula metadata

## Package facts

- **Package key:** brew:humanbound
- **Package manager:** Homebrew
- **Version:** 2.8.0
- **Source summary:** Adversarial security testing engine, SDK, and CLI for AI agents
- **Homepage:** <https://docs.humanbound.ai/>
- **Last updated:** 2026-07-31T00:17:01Z
- **Generated:** 2026-08-03T19:37:03+00:00

## Executables

- hb (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 2.8.0
## Project history and usage

Humanbound is an open-source adversarial testing engine, Python SDK, and hb command-line interface for AI agents. It drives multi-turn attacks against live agent endpoints, evaluates failures, and can turn findings into runtime guardrail rules.

### Project history

The official Humanbound repository was created in February 2026 and is maintained by the verified Humanbound GitHub organization. The project combines an Apache-licensed local engine with an optional hosted platform, allowing initial testing without a login while preserving a path to managed posture tracking.

The official release notes describe a consolidation around the humanbound PyPI package: the earlier humanbound-cli package was yanked, and the CLI and public SDK now ship together. The same repository also integrates with the sibling humanbound-firewall package for a test-to-guardrail workflow.

### Adoption history

Humanbound is a young project, so its reliable adoption history is limited. Official materials show distribution through PyPI, Homebrew in the supplied package facts, and an official GitHub Action for security gates in continuous integration.

### How it is used

Users describe an agent endpoint in a JSON configuration file and optionally define permitted and restricted behavior in a scope file. The hb test command runs attacks locally or through the platform; hb posture, hb logs, and hb report inspect the results.

Local attack generation and judging can use OpenAI, Anthropic, Gemini, Azure OpenAI, Grok, or Ollama. Provider settings resolve from CLI flags, environment variables, and then ~/.humanbound/config.yaml; platform login credentials are stored under ~/.humanbound/.

### Why package nerds care

Humanbound is notable as an AI-security tool that packages an engine, SDK, and CLI under one Python distribution while keeping the firewall as a composable sibling package. Its optional extras let package users choose the provider engine, firewall runtime, or both.

### Timeline

- 2026: The official humanbound/humanbound repository was created.
- 2026: The project consolidated the CLI and SDK in the humanbound PyPI package and yanked the older humanbound-cli package.
- 2026: The official release feed reached the v2.7 series.

### Related projects

- humanbound-firewall is the sibling Apache-licensed runtime that deploys rules generated from Humanbound findings.
- humanbound/actions is the official GitHub Action for running Humanbound checks in CI.

### Sources

- <https://docs.humanbound.ai/>
- <https://docs.humanbound.ai/authentication/>
- <https://docs.humanbound.ai/local-engine/provider-config/>
- <https://github.com/humanbound/humanbound>
- <https://github.com/humanbound/humanbound/releases>
- source_facts.package-manager


## Security Notes

No matching local secret-handling manifest was found for humanbound. Nucleus package metadata is still published here so future coverage has a stable package URL.



## Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.


## Configuration files

- Unix: ~/.humanbound/config.yaml

## Credential files

- Unix: ~/.humanbound/

## Combined YAML source

View the package source record on GitHub. [combined/humanbound.yml](https://github.com/mxcl/pkgdb/blob/main/combined/humanbound.yml)


## Sources

- pkg.so package database
- curated configuration and credential file locations
- curated package history
- cross-ecosystem install command graph