OpenAI's GPT-Red Automated Red-Teaming Model Outperforms Humans 84% to 13% on Prompt Injection

OpenAI has published details on GPT-Red, an internal automated red-teaming model used to probe its production systems for vulnerabilities, with a particular focus on prompt injection attacks. In head-to-head evaluations, GPT-Red succeeded on 84% of prompt injection test cases compared to just 13% for human red-teamers, representing a dramatic efficiency and coverage gain in security testing. This matters for developers because it signals that prompt injection remains a highly exploitable vector and that manual red-teaming alone is insufficient for serious production deployments. OpenAI is using this model internally to harden its own systems, but the methodology and findings raise the bar for what rigorous AI security testing should look like across the industry. Teams shipping agentic or tool-using systems should treat this as a strong signal to invest in automated adversarial testing rather than relying on periodic manual reviews.