GPT-Red: Unlocking Self-Improvement for Robustness

GPT-Red, an AI agent, is designed to enhance the robustness, alignment, and trustworthiness of future models. An early version of GPT-Red identified "Fake Chain-of-Thought" direct prompt injection attacks, which had success rates over 95% on GPT-5.1 but are now below 10% for GPT-5.6 Sol. GPT-Red has also saturated indirect prompt injection benchmarks for developer tools and browsing with over 97% accuracy. This indicates a self-improving safety flywheel, where current models contribute to making subsequent GPT releases safer through continuous algorithmic improvements and scaling of compute and data.