OpenAI says it uses an automated red-teaming system, GPT-Red, to strengthen GPT-5.6 against prompt injection attacks. According to the outlets, GPT-Red is designed to mimic the workflow of a human red teamer: it supplies prompts to a target model, observes the model’s responses, and iterates to probe for weaknesses. In the described setup, the system is trained using self-play reinforcement learning, where GPT-Red and defender models learn together across many different scenarios. Across this process, GPT-Red receives reward when it can elicit a “valid failure,” such as behavior consistent with a successful prompt-injection attempt, while defender models are trained to mitigate those outcomes. One outlet also reports that GPT-Red performs competitively against human red teamers on prompt injection testing, suggesting the automated approach can find vulnerabilities effectively. OpenAI says these findings from GPT-Red are used to make GPT-5.6 more resistant to prompt injection.