Research question
Can defenders block a jailbreak class after seeing only a few examples?
Key findings
- Proliferating observed jailbreaks and fine-tuning a classifier cuts attack success by over 240x in distribution - Introduces RapidResponseBench
Rapid Response
Anthropic's rapid-response paradigm for patching jailbreak classes quickly after observation, later targeted by "Rapid Poison" attacks in 2026.
Contribute
Spot an error, or know a record we should add? Members can propose additions and submit corrections.