--- title: "foojay – a place for friends of OpenJDK" url: https://daily.dev/posts/foojay-a-place-for-friends-of-openjdk-vke1bkzad source_url: https://foojay.io/today/tiberius-a-security-testing-framework-for-llm-applications-in-java type: article source: "Foojay.io" published: 2026-06-04T20:15:35.284Z updated: 2026-07-09T02:12:36.459Z tags: ["java", "langchain4j", "prompt-injection", "security", "testing"] reading_time: 13 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # foojay – a place for friends of OpenJDK **[Foojay.io](https://daily.dev/sources/foojayio)** · 13 min read · 0 upvotes · 0 comments ## Summary Tiberius is an open-source Java library for security and vulnerability testing of LLM applications, integrating with JUnit 5 and Spring Boot. It addresses the challenge of testing non-deterministic systems through five key capabilities: fixture-based regression testing (serializing scan results to JSON for reproducible downstream tests), guardrail validation against real attack data from fixtures, probabilistic security contracts using multi-trial scanning with statistical assertions, bias testing across demographic variants, and model fingerprinting to detect identity leakage. The library ships with 200+ probes across nine attack categories mapped to the OWASP LLM Top 10, supports custom mutation operators (Buffs), and integrates with Ollama, OpenAI, and Anthropic. It advocates for shared community attack datasets to raise the defensive baseline across industries. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Foojay Podcast \#99: Testing the Untestable, LLM Security for Java Developers with Tiberius · webtechie.be](https://daily.dev/posts/foojay-podcast-99-testing-the-untestable-llm-security-for-java-developers-with-tiberius-webtech-saikybh6p) · WebTechie · 1 upvotes · 0 comments - [Foojay Podcast \#99: Testing the Untestable: LLM Security for Java Developers with Tiberius](https://daily.dev/posts/foojay-podcast-99-testing-the-untestable-llm-security-for-java-developers-with-tiberius-2rr5xtnzc) · Foojay.io · 0 upvotes · 0 comments - [foojay – a place for friends of OpenJDK](https://daily.dev/posts/foojay-a-place-for-friends-of-openjdk-vbnawkqyq) · Foojay.io · 1 upvotes · 0 comments - [foojay – a place for friends of OpenJDK](https://daily.dev/posts/foojay-a-place-for-friends-of-openjdk-gcmjgzlna) · Foojay.io · 0 upvotes · 0 comments - [foojay – a place for friends of OpenJDK](https://daily.dev/posts/foojay-a-place-for-friends-of-openjdk-w9fropxm1) · Foojay.io · 0 upvotes · 0 comments --- Tags: [#java](https://daily.dev/tags/java), [#langchain4j](https://daily.dev/tags/langchain4j), [#prompt-injection](https://daily.dev/tags/prompt-injection), [#security](https://daily.dev/tags/security), [#testing](https://daily.dev/tags/testing) [View this post on daily.dev](https://daily.dev/posts/foojay-a-place-for-friends-of-openjdk-vke1bkzad)