Internal automated red-teaming model trained via self-play to find prompt-injection attacks, reaching about 84% attack success versus 13% for humans. Its attacks were used to train GPT 5.6, which had six times fewer failures than 5.5; it stays internal.
GPT Red
by OpenAI
OpenAI's internal red-teaming model trained via self-play to discover prompt-injection attacks; not publicly released.
Updated EU status checked Last shown
GPT Red at a glance
- What is GPT Red?
- GPT Red is a model from OpenAI. OpenAI's internal red-teaming model trained via self-play to discover prompt-injection attacks; not publicly released.
- Who makes GPT Red?
- GPT Red is made by OpenAI.
- Does GPT Red work in the EU?
- Unverified. No explicit evidence found; the model is reportedly internal to OpenAI and not publicly offered in any region. Last verified 14 Nov 2026.
- How much does GPT Red cost?
- Pricing unknown. Internal model; no public access or pricing reported.
- Where was GPT Red shown?
- In 1 creator video by AI Search. Most recently by AI Search on 19 Jul 2026, at 30:52 in “Kimi K3, dancing waifus, robot UFC, song to MIDI, GPT Red, hoverboards: AI NEWS”.
Sources: creator videos at the linked timestamps. EU status is information, not legal advice; see how we check.
GPT Red is an automated red-teaming model from OpenAI, described by a creator summary as trained through self-play to find prompt-injection attacks against AI systems. According to that secondhand account, it reached roughly 84% attack success, compared with about 13% for human red-teamers.
Its attacks were reportedly used as training data to harden GPT 5.6, which is said to have had about six times fewer failures than GPT 5.5 on these attacks. The figures come from a YouTube creator's summary and could not be checked against an official page.
GPT Red is reported to remain internal. It is not offered as a product, API or downloadable model, and no official documentation, paper or pricing was available.
- Automated red-teaming via self-play
- Targets prompt-injection attacks
- Reported ~84% attack success vs ~13% for humans
- Attacks used to train GPT 5.6 (reported ~6x fewer failures than 5.5)
- Internal use only
As seen on YouTube
Watch the moment: the exact second top creators show it. Videos load only when you press play, via youtube-nocookie.com.
Similar AI tools
Closest neighbours by meaning, not just by category.
GPT-6 Cyber
Model · OpenAI
OpenAI cybersecurity model for finding and validating exploitable vulnerabilities, with access limited to vetted defenders.
OpenAI Daybreak
Agent · OpenAI
OpenAI's cybersecurity program offering vetted access to AI models and Codex Security for vulnerability defense and red teaming.
GPT Image
Model · OpenAI
OpenAI's image generation and editing model family, accessed via the API and ChatGPT.
GPT-5.4
Model · OpenAI
OpenAI frontier language model used for coding, reasoning and agentic tasks, available via ChatGPT and the API.
GPT-6 Astra
Model · OpenAI
OpenAI's GPT-6 Astra, a frontier language model used for reasoning, agentic work and weight interpretation research.
Exploit Gym
Research · OpenAI
OpenAI internal benchmark that tests whether AI agents can exploit software vulnerabilities in a sandbox.