Jailbreak research tools
Free, no signup, no account. Everything on this page runs in your browser and stays there. These are reference tools for people who read jailbreak research, not attack tooling.
A faceted, searchable catalog of 65 jailbreak technique classes. Filter by the behavioural property each one exploits, by modality, by first-seen year and by patch status. Every record links to its primary disclosure and to the analysis on this site.
Index and references only. No working payload strings are published.
Definitions for the attack, defense and evaluation terms used across these articles: adversarial suffix, indirect prompt injection, HarmBench, JailbreakBench and more.
56 entries.
Search every article on this site, including source titles and technique names, without leaving the page.
Start with these
If you arrived looking for a specific technique class rather than a tool, these are the most-read entries on the site.
- Universal adversarial suffixes: how the GCG attack works
- The jailbreak detection evasion arms race
- How jailbreak benchmarks measure success (ASR, HarmBench, JailbreakBench)
- Crescendo and multi-turn jailbreaks
- How to detect jailbreak prompts: the three layers
- Best LLM red team tools and promptfoo alternatives