Latest Research

Benchmarking the Security of Open-Weight Models, Part 5: Automated Red-Teaming with NVIDIA Garak
A scanner’s hit rate is a lead, not a measure of risk: most of what garak flagged against Qwen 3.8 was its own detectors mis...

Benchmarking the Security of Open-Weight Models, Part 4: What a Detection Standard Catches, and Why
Part 3 showed that a harness’s own guardrail can’t see inside file content it reads. This installment layers a product...

Benchmarking the Security of Open-Weight Models, Part 3: The Harness Around the Model
Parts 1 and 2 benchmarked whether Qwen 3.8 is safe to deploy. This piece asks a different question: once that same model is wired ...