mlsanityData to 14 Oct 2026

The Automation Advantage in AI Red Teaming

arXiv 2504.19855 ↗First posted 28 Apr 2025cs.CRcited by 4

On the map: LLM safety and security → Prompt injection and agent security

Abstract (arXiv)

This paper analyzes Large Language Model (LLM) security vulnerabilities based on data from Crucible, encompassing 214,271 attack attempts by 1,674 users across 30 LLM challenges. Our findings reveal automated approaches significantly outperform manual techniques (69.5% vs 47.6% success rate), despite only 5.2% of users employing automation. We demonstrate that automated approaches excel in systematic exploration and pattern matching challenges, while manual approaches retain speed advantages in certain creative reasoning scenarios, often solving problems 5x faster when successful. Challenge categories requiring systematic exploration are most effectively targeted through automation, while intuitive challenges sometimes favor manual techniques for time-to-solve metrics. These results illuminate how algorithmic testing is transforming AI red-teaming practices, with implications for both offensive security research and defensive measures. Our analysis suggests optimal security testing combines human creativity for strategy development with programmatic execution for thorough exploration.

Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 11 of its 16 references that are in the map. First posted on arXiv 28 Apr 2025.

Builds on

11 of 16 references.

Closest ancestors · 3

Same direction, newest first

  1. 2024Against The Achilles' Heel: A Survey on Red Teaming for Generative Models31 Mar
  2. 2023Summon a Demon and Bind it: A Grounded Theory of LLM Red Teaming10 Nov
  3. 2023Ignore This Title and HackAPrompt: Exposing Systemic Vulnerabilities of LLMs through a Global Scale Prompt Hacking Competition24 Oct

Other references · 8

  1. 2020Extracting Training Data from Large Language Modelscited by 2,189
  2. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,651
  3. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
  4. 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 836
  5. 2023AutoDAN: Generating Stealthy Jailbreak Prompts on Aligned Large Language Modelscited by 785
  6. 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
  7. 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 431
  8. 2025SafeRAG: Benchmarking Security in Retrieval-Augmented Generation of Large Language Modelcited by 32

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 3.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026A Red Teaming Framework for Evaluating Robustness of AI-enabled Security Orchestration, Automation, and Response Systems
  2. 2025A Red Teaming Roadmap Towards System-Level Safety
  3. 2025Security Challenges in AI Agent Deployment: Insights from a Large Scale Public Competition
  4. 2025Capability-Based Scaling Trends for LLM-Based Red-Teaming
  5. 2025Red Teaming AI Red Teaming
  6. 2025Automatic LLM Red Teaming
  7. 2026Comparison requires valid measurement: Rethinking attack success rate comparisons in AI red teaming
  8. 2025RedCoder: Automated Multi-Turn Red Teaming for Code LLMs