Humanbound website

Blog

AI security insights, research, and product updates from the Humanbound team.

Humanbound cover: "Not every model makes a good attacker: OpenAI vs DeepSeek for red-teaming". A bad-refund panel over 97 conversations per run shows deepseek-v4.1-flash at 42% and 52% against gpt-6-luna at 7% and 10%, with the target listed as a LangChain support bot on gpt-4o-mini.

Not every model makes a good attacker: OpenAI vs DeepSeek for red-teaming

Two attacker models, one deliberately weak LangChain support bot, 97 conversations per run. DeepSeek V4.1 Flash talked it into refunding orders that do not exist far more often than OpenAI's gpt-6-luna, with the transcripts, the costs and what the numbers do not prove.

Ayan Pahwa
Ayan Pahwa
Read

One Link Away: What 1,350 Runs Taught Us About Prompt Guardrails

We gave nine models a pricing agent's job and a competitor page one link away from a trap. Four leaked a confidential unit cost on every run. Here is what 1,350 runs say about how much a system-prompt guardrail actually buys you.

DG
Demetris Gerogiannis
Read