SAGE-RT: Synthetic Alignment data Generation for Safety Evaluation and Red Teaming
On the map: LLM safety and security → Prompt injection and agent security
Abstract (arXiv)
We introduce Synthetic Alignment data Generation for Safety Evaluation and Red Teaming (SAGE-RT or SAGE) a novel pipeline for generating synthetic alignment and red-teaming data. Existing methods fall short in creating nuanced and diverse datasets, providing necessary control over the data generation and validation processes, or require large amount of manually generated seed data. SAGE addresses these limitations by using a detailed taxonomy to produce safety-alignment and red-teaming data across a wide range of topics. We generated 51,000 diverse and in-depth prompt-response pairs, encompassing over 1,500 topics of harmfulness and covering variations of the most frequent types of jailbreaking prompts faced by large language models (LLMs). We show that the red-teaming data generated through SAGE jailbreaks state-of-the-art LLMs in more than 27 out of 32 sub-categories, and in more than 58 out of 279 leaf-categories (sub-sub categories). The attack success rate for GPT-4o, GPT-3.5-turbo is 100% over the sub-categories of harmfulness. Our approach avoids the pitfalls of synthetic safety-training data generation such as mode collapse and lack of nuance in the generation pipeline by ensuring a detailed coverage of harmful topics using iterative expansion of the topics and conditioning the outputs on the generated raw-text. This method can be used to generate red-teaming and alignment data for LLM Safety completely synthetically to make LLMs safer or for red-teaming the models over a diverse range of topics.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 14 of its 18 references that are in the map. First posted on arXiv 14 Aug 2024.
Builds on
14 of 18 references.
Closest ancestors · 2
Same direction, newest first
- 2023AART: AI-Assisted Red-Teaming with Diverse Data Generation for New LLM-powered Applications14 Nov
- 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection23 Feb
Other references · 12
- 2023Direct Preference Optimization: Your Language Model is Secretly a Reward Modelcited by 8,065
- 2020Scaling Laws for Neural Language Modelscited by 6,586
- 2022Training a Helpful and Harmless Assistant with Reinforcement Learning from Human Feedbackcited by 3,720
- 2020MiniLM: Deep Self-Attention Distillation for Task-Agnostic Compression of Pre-Trained Transformerscited by 1,463
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
- 2023Jailbreaking ChatGPT via Prompt Engineering: An Empirical Studycited by 498
- 2024WildTeaming at Scale: From In-the-Wild Jailbreaks to (Adversarially) Safer Language Modelscited by 223
- 2022Will we run out of data? Limits of LLM scaling based on human-generated datacited by 195
- 2023Do-Not-Answer: A Dataset for Evaluating Safeguards in LLMscited by 184
- 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 136
- 2020MALCOM: Generating Malicious Comments to Attack Neural Fake News Detection Modelscited by 25
- 2021PETGEN: Personalized Text Generation Attack on Deep Sequence Embedding-based Classification Modelscited by 17
Built on by
Citing papers per year: 2024: 1; 2025: 5; 2026: 4.
10 papers.
- 2024Investigating Implicit Bias in Large Language Models: A Large-Scale Study of Over 50 LLMscited by 25
- 2025GuidedBench: Measuring and Mitigating the Evaluation Discrepancies of In-the-wild LLM Jailbreak Methodscited by 12
- 2025No Free Lunch with Guardrailscited by 11
- 2025Quantifying CBRN Risk in Frontier Modelscited by 6
- 2026The Agent Incident Registry: Toward Preventing Repeated AI Agent Failurescited by 2
- 2026Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discoverycited by 1
- 2025ZEBRA: Leveraging Model-Behavioral Knowledge for Zero-Annotation Preference Dataset Constructioncited by 0
- 2025From Threat to Tool: Leveraging Refusal-Aware Injection Attacks for Safety Alignmentcited by 0
- 2026Safety for Whom? Boundary-Aware Self-Distillation for Controlled LLM Safety Refusalcited by 0
- 2026FinRT: Distilling Adaptive Red-Teaming Strategies into Reusable Adversarial Generators in Consumer Financecited by 0
- 2026FinRT: Distilling Adaptive Red-Teaming Strategies into Reusable Adversarial Generators in Consumer Finance29 Sep 2026
- 2026The Agent Incident Registry: Toward Preventing Repeated AI Agent Failures10 Sep 2026
- 2026Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discovery9 Sep 2026
- 2026Safety for Whom? Boundary-Aware Self-Distillation for Controlled LLM Safety Refusal3 Sep 2026
- 2025Quantifying CBRN Risk in Frontier Models24 Oct 2025
- 2025From Threat to Tool: Leveraging Refusal-Aware Injection Attacks for Safety Alignment7 Jun 2025
- 2025No Free Lunch with Guardrails1 Apr 2025
- 2025ZEBRA: Leveraging Model-Behavioral Knowledge for Zero-Annotation Preference Dataset Construction26 Feb 2025
- 2025GuidedBench: Measuring and Mitigating the Evaluation Discrepancies of In-the-wild LLM Jailbreak Methods24 Feb 2025
- 2024Investigating Implicit Bias in Large Language Models: A Large-Scale Study of Over 50 LLMs13 Oct 2024
Similar, not cited
Close in wording, no citation either way
- 2025TRIDENT: Enhancing Large Language Model Safety with Tri-Dimensional Diversified Red-Teaming Data Synthesis
- 2026RedBench: A Universal Dataset for Comprehensive Red Teaming of Large Language Models
- 2025Building Safe GenAI Applications: An End-to-End Overview of Red Teaming for Large Language Models
- 2023Red-Teaming Large Language Models using Chain of Utterances for Safety-Alignment
- 2025LLM-Safety Evaluations Lack Robustness
- 2024SciSafeEval: A Comprehensive Benchmark for Safety Alignment of Large Language Models in Scientific Tasks
- 2024DiveR-CT: Diversity-enhanced Red Teaming Large Language Model Assistants with Relaxing Constraints
- 2023Language Model Unalignment: Parametric Red-Teaming to Expose Hidden Harms and Biases