evaluator; distance from a lab: 1

Microsoft AI Red Team

Scorecard

External red team for other labs' models; not independent of Big Tech.

Big Tech unit, Redmond, US. Confidence med. Domains: jailbreak, cyber, misuse. Scores by preset: Lab procurement 41; Regulator or auditor 43; Public trust 31; Equal weights 38. Weakest dimension: funding 1/4. Evidence-limited on 2 dimension(s): values held at the nearest supportable anchor until a live source is confirmed.

What would move the score. Not a candidate for an independence-critical role; useful as a supplementary red team.

Funding 1/4

Material revenue or investment from evaluated labs or their investors.

evidence: tier 4 (press)

evidence-limited: held at a supportable value

Anchor 0 on funding given the cited signals. Evidence-limited: the cited sources are imported or unaudited only, so the value is held at 1 (the reading on the record would be 0) until a live source is confirmed.

Microsoft is a major OpenAI investor and a frontier developer with its own CAISI agreement.
CAISI Frontier Testing Agreements Reach Five Labs (Cloud Security Alliance, 2026-05-20) tier 4 pressunaudited2026-09-14

Governance 1/4

VC-backed for-profit with no published COI policy.

evidence: tier 3 (self)

evidence-limited: held at a supportable value

Anchor 0 on governance given the cited signals. Evidence-limited: the cited sources are imported or unaudited only, so the value is held at 1 (the reading on the record would be 0) until a live source is confirmed.

Business unit of a frontier developer.
Microsoft AI Red Team (Microsoft Learn) (Microsoft, 2026) tier 3 selfunaudited2026-09-14
Microsoft's AI red team has operated since 2018 as an internal function and reports having red-teamed more than 100 generative AI products; it is separate from product teams, not from the developer.
Microsoft AI Red Team (Microsoft Learn) (Microsoft, 2026) tier 3 selfunaudited 3 takeaways from red teaming 100 generative AI products (Microsoft Security Blog, 2025-01-13) tier 3 selfunaudited2025-01-13

Personnel 1/4

Leaders hold equity or advisory roles at labs; informal recusal.

evidence: tier 3 (self)

Anchor 1 on personnel given the cited signals.

Employees of a lab.
Microsoft AI Red Team (Microsoft Learn) (Microsoft, 2026) tier 3 selfunaudited2026-09-14

Access depth (lab-granted) 3/4

Helpful-only or weights-level access, chain of thought, logs, on-site.

evidence: tier 3 (self)

Anchor 3 on access given the cited signals.

Deep access when engaged.
Microsoft AI Red Team (Microsoft Learn) (Microsoft, 2026) tier 3 selfunaudited2026-09-14

Scope control 2/4

Scope negotiated per engagement.

evidence: tier 3 (self)

Anchor 2 on scope given the cited signals.

Scope set by engagement.
Microsoft AI Red Team (Microsoft Learn) (Microsoft, 2026) tier 3 selfunaudited2026-09-14

Publication rights 1/4

Lab-edited summaries only.

evidence: tier 3 (self)

Anchor 1 on publication given the cited signals.

Findings for other labs are rarely published under the team's own name.
Microsoft AI Red Team (Microsoft Learn) (Microsoft, 2026) tier 3 selfunaudited2026-09-14

Method transparency 2/4

Methods described in prose.

evidence: tier 3 (self)

Anchor 2 on methods given the cited signals.

Publishes methodology (PyRIT) openly.
Microsoft AI Red Team (Microsoft Learn) (Microsoft, 2026) tier 3 selfunaudited2026-09-14

Role incompatibility 1/4

Sells to labs and to their customers.

evidence: tier 3 (self)

Anchor 1 on products given the cited signals.

Sells AI products.
Microsoft AI Red Team (Microsoft Learn) (Microsoft, 2026) tier 3 selfunaudited2026-09-14

Traced money and ties

hop 0: 1 row. Confirmed rows: 1 of 1. Dollar sums: confirmed + unaudited USD rows only; imported figures are not re-derived and never summed. Second hop traced for 1 of 1 sources. Ties: none within two steps recorded. Bounded negatives on file: 0.

Ledger

Money in

T64 from Microsoft: transfer undisclosed, . business unit of Microsoft, corporate budget confirmedtier 3 selfhttps://www.microsoft.com/en-us/security/blog/topic/ai-red-team/

One hop away

Microsoft

Funding graph, focused

Neighbours at full strength, everything else faded. Hover any name to move the focus; click a name to open its page.