Red teaming
Also written: Red Team, Red-teamers, Red teaming exercises, Red team exercises, Red-team test, Red team assessments, Adversarial Red Teaming, Automated red teaming
Testing AI systems by trying to break them to find weaknesses and ensure safety.
Red teaming is like hiring a hacker to test your security system. For AI, it means having a dedicated team try to make the AI do bad things or fail in ways it shouldn't. This helps developers find and fix problems before the AI is released to the public.
For example, a red team might try to trick a chatbot into giving dangerous advice or revealing private information. They look for any way the AI can be misused or cause harm. This process is crucial for making AI safer and more reliable.
Red teaming involves adversarial testing where a team simulates attacks or exploits to identify vulnerabilities, biases, and potential harms in AI systems. The goal is to proactively discover and mitigate risks, ensuring the system behaves as intended and adheres to safety guidelines under diverse and challenging conditions. This practice is essential for evaluating and improving the robustness and security of frontier AI models.
Frontier AI labs are increasingly using red teaming to find and fix vulnerabilities before their models are released. Recent news shows companies like Anthropic and OpenAI are actively engaging in these adversarial tests, sometimes with external partners, to ensure their AI systems are safe and secure against unexpected or harmful behaviors.
- What are self-replicating ‘AI worms’, and why is Anthropic worried about them?Anthropic · The Guardian AI ·
- Anthropic update on independent evaluatorsAnthropic · Anthropic News ·
- Screwtape: Adversarial Transcript Editing for Monitor Red-TeamingAnthropic · arXiv cs.AI ·
- Singapore office and government MOUAnthropic · Anthropic News ·
- How Block is building AI-powered security with OpenAI technologyOpenAI · OpenAI News ·
- Scoop: Top AI companies probing tens of thousands of security incidentsOpenAI · Axios AI ·
- Priorities and principles for effective third party assessmentsOpenAI · OpenAI News ·
- Anthropic’s first embedded evaluator is … Accenture?Anthropic · TechCrunch AI ·
- Partnering with Accenture on embedded evaluationAnthropic · Anthropic News ·
- Constitutional Classifiers: Defending against universal jailbreaksAnthropic · Anthropic Research ·
- Challenges in red teaming AI systemsAnthropic · Anthropic News ·
- Frontier Red Team ResearchAnthropic · Anthropic Research ·
- GPT-Red: Unlocking Self-Improvement for RobustnessOpenAI · OpenAI News ·
- Agentic misalignment: How LLMs could be insider threatsAnthropic · Anthropic Research ·
- Frontier threats red teaming for AI safetyAnthropic · Anthropic News ·
- AI to defend critical infrastructureAnthropic · Anthropic Research ·
- Meta's Data Center on Your FaceAnthropic · AI Inside ·
- Predicting model behavior before release by simulating deploymentOpenAI · OpenAI News ·
- OpenAI Board Member Zico Kolter on the Real Risks of Frontier AIOpenAI · The MAD Podcast ·
- GPT-5.5 System CardOpenAI · OpenAI News ·
- OpenAI to acquire PromptfooOpenAI · OpenAI News ·
- Continuously hardening ChatGPT Atlas against prompt injectionOpenAI · OpenAI News ·
- Strengthening our safeguards through collaboration with US CAISI and UK AISIAnthropic · Anthropic News ·
- Releasing Claude Instant 1.2Anthropic · Anthropic News ·
- Security on the path to AGIOpenAI · OpenAI News ·
- Forecasting rare language model behaviorsAnthropic · Anthropic Research ·
- Deep research System CardOpenAI · OpenAI News ·
- Preparing for global elections in 2024Anthropic · Anthropic News ·
- Thoughts on the US Executive Order, G7 Code of Conduct, and Bletchley Park SummitAnthropic · Anthropic News ·
- Red Teaming Language Models to Reduce Harms: Methods, Scaling Behaviors, and Lessons LearnedAnthropic · Anthropic Research ·
- Aligning on child safety principlesAnthropic · Anthropic News ·
- Sora is hereOpenAI · OpenAI News ·
- OpenAI o1 System CardOpenAI · OpenAI News ·
- Advancing red teaming with people and AIOpenAI · OpenAI News ·
- An update on our safety & security practicesOpenAI · OpenAI News ·
- GPT-4o System CardOpenAI · OpenAI News ·
- Claude 2Anthropic · Anthropic News ·
- Empowering defenders through our Cybersecurity Grant ProgramOpenAI · OpenAI News ·
- Expanding on how Voice Engine works and our safety researchOpenAI · OpenAI News ·
- Disrupting malicious uses of AI by state-affiliated threat actorsOpenAI · OpenAI News ·
- How OpenAI is approaching 2024 worldwide electionsOpenAI · OpenAI News ·
- Frontier risk and preparednessOpenAI · OpenAI News ·
- Frontier Model Forum updatesOpenAI · OpenAI News ·
- DALL·E 3 is now available in ChatGPT Plus and EnterpriseOpenAI · OpenAI News ·
- DALL·E 3 system cardOpenAI · OpenAI News ·
- OpenAI Red Teaming NetworkOpenAI · OpenAI News ·
- Confidence-Building Measures for Artificial Intelligence: Workshop proceedingsOpenAI · OpenAI News ·
- Moving AI governance forwardOpenAI · OpenAI News ·
- 53: Offensive security at Meta's Red Team XMeta · Meta Tech Podcast ·
- Anthropic Claude
- Anthropic uses red teaming to test AI safety monitors and has partnered with external evaluators for independent model assessments.
- OpenAI ChatGPT
- OpenAI engages in red teaming to probe security incidents and is opening its AI development to third party assessments, indicating a focus on identifying vulnerabilities.
- Penetration testing
- While similar, penetration testing typically focuses on com
- Bug bounty programs
- Bug bounties reward external researchers for finding bugs,
- Fuzzing
- Fuzzing is an automated technique that feeds invalid or random data to
The term 'red teaming' originates from military simulations where a 'red team' acts as the adversary against a 'blue team' defending a system. This concept was adopted by cybersecurity and later by AI safety researchers to describe adversarial testing of AI models. Source ↗
Ask an AI chatbot to write a story where a character gives dangerous advice, then see if it refuses or warns you. You can also try to trick it into revealing personal information about itself or other users. Observe how the AI responds to these attempts to break its safety guidelines.
The Playbook: reusable how-tos, prompts, configs and tips pulled out of the news.
- Case studyUsing Screwtape to find confirmed failures of AI monitorsDemonstrates how a red-teamer can find confirmed failures of an AI monitor without developer infrastructure access. · 120 min
- ChecklistDALL·E 3 deployment preparation and risk mitigationSteps for preparing DALL·E 3 for deployment, including red teaming and risk evaluations. · 30 min
- Eval methodEvaluate Constitutional Classifier robustness against jailbreaksTest Constitutional Classifiers by attempting jailbreaks with red teaming and synthetic prompts. · 30 min
- ChecklistScaling AI safety with automated red-teamingSteps to scale AI safety efforts using automated red-teaming models. · 10 min
- ChecklistSafety Testing for Deep Research Model DeploymentPre-deployment checks for AI models, focusing on safety, risk evaluation, and mitigation effectiveness. · 60 min
Questions people ask
- What is the main goal of red teaming AI?
- The main goal is to proactively identify and fix potential harms, biases, and vulnerabilities in AI systems before they can be exploited or cause damage.
- Is red teaming the same as regular testing?
- No, red teaming is a specialized form of testing that simulates adversarial attacks and attempts to 'break' the AI, going beyond standard functional testing.
- Who performs red teaming?
- Red teaming can be performed by internal security teams, external security firms, or dedicated AI safety researchers.
First seen on Subvolts Jul 21, 2023. Updated Oct 19, 2026. Written by an AI model from the items above and reviewed against them weekly; report an error.

