Live model · public red-team

Try to sneak
past the filter.

VECTOR is a classifier trained to catch prompt injection attempts before they reach a downstream model. Type anything below. If you get a malicious prompt through clean, tell me how — I credit every verified bypass, and I use it to retrain the filter.

SIGNAL.TRACE IDLE
Process

How the challenge works

Three steps, from your prompt to a stronger filter.

01

You submit a prompt

Anything you'd try against a real LLM app — role-play, encoding tricks, instruction overrides, whatever you've got.

02

The filter scores it

The classifier returns a verdict — safe or flagged — before the prompt is allowed anywhere near the underlying model.

03

Bypasses get verified

If your prompt gets through and actually manipulates the underlying model, submit it. Verified bypasses get public credit and feed the next training run.

Leaderboard

Hall of bypasses

Everyone credited here found something the filter missed.

HandleTechniqueDateStatus
No verified bypasses yetOPEN

// This table populates live once bypasses are verified. Empty on launch by design.