Automated Red-Teaming

Why it matters

Automated red-teaming scales findings. Understanding shapes practice.

The architecture

Attacker LLM generates prompts.

Target LLM responds.

Judge scores.

Iterate: attacker learns.

How it works end to end

PAIR (Chao et al. 2023).

AutoDAN.

Rainbow Teaming (Meta).

Findings feed safety training.