Editorial desk
JailbreakDB Editorial
JailbreakDB Editorial is the publishing identity for JailbreakDB. It is a desk, not a person: no named author, no biography, no professional certifications.
Articles published under this byline are researched from primary sources — vendor and project documentation, published standards and specifications, research papers, and measurements published by whoever took them — drafted with AI assistance, and edited against those cited sources before publication. Nothing here is based on first-hand testing in a private lab, and any figure that appears is attributed to the source it came from.
Corrections go to hello@jailbreakdb.com. More detail is on the about page and the editorial disclosure.
Posts (15)
- tools
LLM Security Testing Platform: Buyer's Guide for 2026
Picking an LLM security testing platform: open-source harness vs commercial suite, who got acquired, and five checks that expose weak tools.
- defense
AI Jailbreak Detection Tools: Six Options Worth Shortlisting
A technical buyer's guide to jailbreak detectors, prompt-injection filters, cloud guardrails, and the coverage gaps vendors tend to bury in documentation.
- defense
How to Detect Jailbreak Prompts: The Three Layers
The three jailbreak detection layers — input classifiers, output monitoring, and in-model sentinels — what each one catches, and where each is evaded.
- technique
Prompt Injection vs Jailbreak: Two Different Attacks on LLMs
Prompt injection and jailbreak get conflated constantly, but they hit different layers and need different defenses. Here is how to tell them apart.
- tools
Best LLM Red Team Tools: Garak, PyRIT, and Promptfoo
The best LLM red team tools are compared across attack coverage, multi-turn depth, CI integration, strengths, limitations, and ideal use cases.
- technique
LLM Jailbreak Techniques Explained: 7 Attack Families
A technical breakdown of LLM jailbreak techniques by attack category, from role-play bypasses to multilingual exploits and multi-turn escalation.
- technique
Crescendo Multi-Turn Jailbreaks: Why Defenses Miss Them
Crescendo multi-turn jailbreaks evade per-message defenses by exploiting conversation context, requiring session-level classification and monitoring.
- research
How Jailbreak Benchmarks Measure Success: JailbreakBench
How to read a jailbreak attack-success-rate: the behaviour set, attacker harness, judge and target that decide the number, and why two papers disagree.
- primer
Many-Shot vs. Single-Shot Jailbreaks: Long-Context Risks
Single-shot jailbreaks compress the entire attack into one prompt; many-shot jailbreaks exploit the model's in-context learning.
- policy
Responsible Disclosure Norms for LLM Jailbreaks
Software vulnerability disclosure has 30 years of evolved norms. LLM jailbreak disclosure is 4 years old and still contested.
- technique
Encoding and Obfuscation Jailbreaks: The Filter-Model Gap
Encoding and obfuscation jailbreaks exploit representation gaps between content filters and LLMs; normalization and decoding can help detect them.
- research
Jailbreak Detection-Evasion Arms Race: How Attackers Adapt
Jailbreak detection and evasion form an arms race in which attackers probe classifier boundaries and defenders use layered safeguards.
- technique
Roleplay and Persona Jailbreaks: Why They Often Fail
Roleplay and persona jailbreaks such as DAN use fictional framing, but modern safety training blocks many variants on frontier models.
- technique
Universal Adversarial Suffixes: How the GCG Attack Works
Greedy Coordinate Gradient finds nonsense token suffixes that jailbreak aligned LLMs and transfer to closed models, plus the defenses that blunt them.
- research
LLM Jailbreak Taxonomy 2026: How the Techniques Cluster
Six years of jailbreak research has produced a messy literature. This taxonomy organizes working techniques by the behavioral property each one exploits.