AI Security Institute (AISI) (@AISecurityInst) header
AI Security Institute (AISI) (@AISecurityInst) profile picture

We conduct scientific research to understand AI’s most serious risks and develop and test mitigations.

United Kingdom
Joined February 2024
Photo by AI Security Institute (AISI) (@AISecurityInst)Photo by AI Security Institute (AISI) (@AISecurityInst)Photo by AI Security Institute (AISI) (@AISecurityInst)Photo by AI Security Institute (AISI) (@AISecurityInst)Photo by AI Security Institute (AISI) (@AISecurityInst)Photo by AI Security Institute (AISI) (@AISecurityInst)Photo by AI Security Institute (AISI) (@AISecurityInst)Photo by AI Security Institute (AISI) (@AISecurityInst)Photo by AI Security Institute (AISI) (@AISecurityInst)Photo by AI Security Institute (AISI) (@AISecurityInst)
New research from AISI's Chem-Bio team: two studies on safeguarding biological AI tools - specialised models that are driving rapid advances in biology, from predicting protein structures to designing molecules. 🧵
5
18
6
70
7,569
Across both studies, we find that durable safeguards for biological AI tools likely need a combination of controls, including on the underlying data, rather than just the code or weights. AISI's Chem-Bio team works to understand, evaluate, and mitigate these risks. If you are excited to contribute towards this mission, join us: job-boards.eu.greenhouse.io/…
1
1
7
1,041
We performed an alignment investigation into our July 2026 incident: why did Mythos 5 perform an unsanctioned supply-chain attack? We find that Mythos 5 often produces invalid justifications for its actions and other models show similar behaviour. 🧵
25
62
12
295
47,043
As capabilities grow, investigating incidents in depth and sharing what we find will be vital for safety across the ecosystem. Anthropic have independently performed their own alignment analysis of the incident, and we worked with them throughout this investigation.
1
20
1,378
AI Security Institute (AISI) retweeted
One of the most underrated things about AISI: the open-source testing infrastructure it builds and shares openly with the whole field. Last week we released Transect - a tool that turns the increasingly complex agent evaluation transcripts into interactive timelines. And that's just the tip of the iceberg. A quick tour: Transect runs on AISI's Inspect platform. Inspect is an open-source framework for evaluating frontier AI models across coding, reasoning, agentic, and multi-modal tasks. We open-sourced Inspect in May 2024, and it's become the standard evaluation platform used by frontier AI companies and safety orgs including AI security bodies in the US, EU, Japan and South Korea. Inspect is also expanding thanks to those from safety institutes, frontier labs and research groups who use it. Anthropic built Petri on top of it. The Allen Institute chose it as the foundation for AstaBench. It's available through AISI's GitHub, which you can access here: inspect.aisi.org.uk Inspect was the gateway to a suite of custom-built and open sourced eval tools. A few more AISI has released: - Inspect Cyber - build and run agentic cyber evals, from simple CTFs to full cyber ranges. - Inspect Sandbox - plugins for agentic eval environments. We use it internally; it's helped CAISSI, METR and Apollo adopt open-source sandbox providers too. - ControlArena - built with Redwood Research, for running AI control experiments. Already used by Redwood, Google DeepMind, Anthropic and MATS. It shows up in OpenAI's GPT-5.6 system card. - Inspect Scout - transcript analysis. Turns thousands of transcripts into structured results, surfacing failure modes and safety-relevant behaviours. Underlying Inspect is the AISI Engineering Playbook - an open guide to the infrastructure behind our frontier evals written by AISI's Engineering team, so that organisations wanting to stand up their own eval capabilities don't need to start from scratch. aisi.gov.uk/blog/releasing-a…
As AI agents write code, run experiments, and work together, complex evaluations get harder to interpret. A single eval score obscures the ways agents reached it. Today, we're releasing Transect: an open-source tool that turns agent transcripts into interactive timelines. 🧵
21
15
1
97
10,282
Our blog sets out our priorities for new best practice for frontier development: - Documenting and assessing risk - Preserving and evaluating oversight methods - Enabling independent auditors and evaluators - Measuring alignment and security-relevant capabilities
2
16
3,178
These challenges need a wide range of expertise, including developers, cybersecurity, incident response and other safety-critical industries. We plan to work iteratively with developers and other frontier AI organisations to identify and share best practice.
1
10
1,814