Did this release break what worked last week?
Regression
A fixed suite run in CI on every build or deploy, often scored by model graders. Your engineers run it on eval tooling.
Find the team or the tool that tests your model before your users do. Some vendors send trained raters and red-teamers; others sell the software your engineers run on every build. Describe your release and we suggest who fits.
1 · Test set
refund_17 Can I return a worn jacket?tone_04 Angry customer, late orderpii_09 Asks for another user's address2 · Model run
240 of 240 answered
3 · Graders
4 · Report
91%candidate
Current: 87%. Three regressions to read, one on pii_09.
Hold release for review
Invented example run. No real model, product or result is shown.
A managed service sells people: trained raters, domain experts or attackers, with rubrics and project management around them. Eval tooling sells software: test sets, CI runs, code and model graders, traces of live traffic. Most teams end up with tooling for the daily checks and a service for the work that needs judgment.
Counted from each vendor's own description. Several sell both software and people.
Knowing which model a vendor uses tells you what to watch. Software usually prints a price; the people-heavy services quote per project.
Braintrust: $0 Starter, $249 a month Pro
LangSmith Plus: $39 per seat monthly
Labelbox: 20 LBU per data row, dollar rate by quote
Prolific: $8 an hour minimum, $12 recommended
Scale AI, Surge AI, Toloka, TELUS Digital
Ask for a written test plan before anything runs, item-level results rather than a headline score, and the price of rerunning the same set on your next release. A security badge on a page is a claim: ask for the actual SOC 2 or ISO 27001 report under NDA and check its scope.
They differ in who does the work and how often you need it. Most teams need at least two.
Did this release break what worked last week?
A fixed suite run in CI on every build or deploy, often scored by model graders. Your engineers run it on eval tooling.
What can someone make it do that it should not?
Adversarial prompting by people plus automated attack tools, before launch and after major changes. Who sells it.
Which answer do real people judge better?
Side-by-side ratings against a rubric, per release or when automated graders disagree.
Can the model do the task, and how well?
Held-out test sets with reference answers or verifiers, built by your team or an expert-data vendor.
DeepEval is Apache-2.0 open source, Giskard's library runs locally for free, and Label Studio's Community Edition handles human review. What open source does not supply is trained raters and attackers.
From each company's own page. Software tends to print a price; services quote. All 20, with security claims.
Disclosure: any vendor on this list can pay us a fee when an introduction we made ends in a signed deal. The listing, its order and its wording are never for sale.
We do not audit vendors or run trials. Plan limits and security badges are each company's own claims. Teams pay nothing; how this works.
The same five steps, whichever vendor you choose.
Agree the behaviors to test, the model version and the pass marks. This becomes the test plan.
A small set is written and scored to check the rubric reads the same to everyone.
Raters or model graders are tuned until agreement is acceptable; ambiguous items are fixed or dropped.
You get item-level results and a written account of failures.
The same set runs on each release, so you see movement rather than a snapshot.
As printed on each company's own pages. None of these is an offer or a quote.
More in the readouts.
It measures how a model or AI product behaves before and after release. Some send trained people to rate outputs and attack the system (a managed service); others sell software your engineers use to run tests, score outputs and trace production traffic. Many sell both.
Software has public prices: Braintrust charges $249 a month for Pro, and LangSmith's Plus tier costs $39 per seat monthly. Human rating through Prolific starts at its $8 an hour participant minimum plus a platform fee. Managed evaluation and red-teaming firms do not publish prices; they quote per project. The eval budget page shows the arithmetic.
It depends on the job. For tests that run on every build and tracing of live traffic, Braintrust, LangSmith and Confident AI (built on the open-source DeepEval) are the platforms with published plans; Giskard adds continuous red-teaming with an open-source library, and Galileo, now owned by Cisco, sells evaluation, observability and guardrails. We do not test or rank them. All vendors and tools.
Usually both, in different amounts. A model grader is cheap enough to score every build, but it only measures how a model reads your rubric. Human raters measure what people actually value and are the only way to check the judge, so most teams calibrate an LLM judge on a small human-rated set and repeat the human round each major release. LLM judge or human raters, in detail.
Start from your own production logs, not a public benchmark. Remove personal details, sample a few hundred real requests, write a checkable answer or a rubric for each, and freeze a held-out portion. A free tool is enough for the first version: DeepEval is Apache-2.0 open source, Giskard has a free library that runs locally, and Label Studio has an open-source Community Edition for human review. Setting up evals from your logs.
Red-teaming is one kind of evaluation: people (or tools) try to make the system fail on purpose, then report what worked. Benchmarks and regression suites measure known behavior repeatedly. Most teams need both; red-teaming services covers who sells the adversarial side.
Company ZIP first, then a contact, then the evaluation itself. A few lines tell us which vendors are worth naming.
We are an introduction service, not an evaluation vendor, and we may be paid by the company we introduce you to.
Please do not paste prompts, logs, model outputs or any other data here. Describe the project in words; data only ever moves under a contract you sign with the vendor.
Here is what happens next: