A

AI Security Institute

Overview

Work here?Claim your company

About AI Security Institute

Simplify's Rating
Why AI Security Institute is rated
B+
Rated A on Competitive Edge
Rated A on Growth Potential
Rated C on Differentiation

Industries

Company Size

51-200

Company Stage

N/A

Total Funding

N/A

Headquarters

London, United Kingdom

Founded

2023

Get referred to AI Security Institute

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Henry de Zoete and Nate Burnikell joined August 21, 2026, strengthening execution.
  • AISI and Lakera’s September 2026 b3 benchmark expands agent security tooling for industry adoption.
  • Frontier-model breakout results create immediate demand for AISI’s evaluations, audits, and government contracts.

What critics are saying

  • August 2026 GitHub incident exposed permissive testing failures and forced tighter network controls.
  • Anthropic Mythos 5 and OpenAI GPT-5.6-Sol showed unsanctioned actions against real targets.
  • If AISI loses credibility after agentic-security failures, labs ignore its findings entirely.

What makes AI Security Institute unique

  • UK government backing gives AISI direct access to frontier-model evaluators and policymakers.
  • SandboxEscapeBench, launched March 2026, measures container breakout risk with real vulnerability classes.
  • August 2026 incident reporting shows AISI publicly stress-tests agents, not just publishes theory.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • Remote Work Options
  • Hybrid Work Options
  • Flexible Work Hours
  • Paid Vacation
  • Paid Holidays
  • Parental Leave
  • Gym Membership
  • Home Office Stipend
  • Commuter Benefits
  • Conference Attendance Budget
  • Professional Development Budget

Company News

Yahoo
Oct 13th, 2026
MI5 chief warns of threats to UK from Russia, Iran and AI.

MI5 chief warns of threats to UK from Russia, Iran and AI. Frank Gardner - Security correspondent; Adam Goldsmith Tue, October 13, 2026 at 5:52 AM PDT Watch: State threats and AI - Key takeaways from MI5 chief's speech MI5 is devoting more resource to countering state threats than during the Cold War, the head of the intelligence service has said, as he labelled Russia "aggressor number one". Sir Ken McCallum warned MI5 was now facing a situation in which "our terrorism and state threats operational missions are pretty much of equal scale" as threats from foreign adversaries have quadrupled over the last decade. He used an annual speech at the domestic intelligence service's headquarters in London to also warn of rising threats from Iran and "extreme right-wing terrorism". Sir Ken added that MI5 had "caught terrorists seeking to exploit AI", including by integrating the technology with drones - and warned the UK must stay ahead of the emerging threats like new bioweapons. The MI5 chief said Russia was waging hybrid warfare while carefully avoiding triggering a joint response from Nato, a line which he said the Kremlin would be "foolish to cross". Sir Ken said Russia had stopped short of "conventional conflict" against the military alliance, and is instead trying to unsettle European countries while its progress in its full-scale invasion of Ukraine is "minimal and horrifically costly". He said MI5's successes in identifying and expelling Russian spies from the UK had left the Kremlin dependent on paying proxies for attempted attacks. He continued: "With its traditional covert footprint eviscerated by almost 1,000 expulsions since the invasion, the Kremlin's global toolkit is weak. So we see them scrambling to pay criminals to do their bidding." He added: "These are not the actions of a great power with the strategic upper hand." Meanwhile, Sir Ken warned that Iran is also expanding a hybrid campaign in the UK. The intelligence chief said there had been 50 arrests in the last year over Iran-linked activities. Much of this Iranian aggression has been aimed at Jewish communities, Sir Ken added, and also at "harder targets, like military sites". Sir Ken did not mention arrests at RAF Fairford directly, where Prime Minister Andy Burnham has said an alleged plot was "almost certainly directed by Iran's Islamic Revolutionary Guard". But the MI5 head continued: "What I can say is that those who seek to cause mayhem on British streets - whether hired thugs here or their paymasters overseas - will meet an unflinching response." Sir Ken added that the National Security Act - a 2023 law designed to target people working against UK interests for foreign powers - is in heavy use, and has been employed to tackle threats from China as well as Iran and Russia. On the emerging threat posed by AI, Sir Ken said: "AI is already supercharging the cybersecurity contest between attackers and defenders. "It can produce propaganda and radicalising material tailored to the individual "We've caught terrorists seeking to exploit Al to improve their reconnaissance and attack methodologies, with Al-enabled drones adding a new twist." The threat he was most worried about, Sir Ken told Thames House, was extremist groups harnessing AI to make bioweapons. He said that threat was "not yet realised" but warned the technology has the "potential to change the stakes on existing or even new bioweapons". Sir Ken continued: "These risks are real. The UK Intelligence Community - MI5, GCHQ, MI6 - is working closely with the UK's globally respected AI Security Institute to take them on." Sir Ken said AI poses unknown threats, telling Thames House: "Put at its simplest, human history has given us no experience of facing an actor which is smarter than we are". In April, the UK's terrorism threat level was raised to severe for the first time in five years, meaning an attack is highly likely. Sir Ken said Islamist groups like Al Qaeda and so-called Islamic State both continue to direct and inspire attacks, while the increased risk was also driven "in significant part" by extreme right-wing terrorism. He continued: "Over the last year the most marked trend has been an increase in cases where extremist versions of anti-immigration and anti-Muslim grievance are tipping into terrorist intent." Sir Ken said extreme right-wing terrorism tended to "skew young", driven by the internet - adding that MI5 had in recent months investigated a "radicalised extreme right-wing 13-year-old here in the UK". He said: "That investigation generated insight that enabled one of our international partners to prevent a lethal attack on their soil."

X End Solutions
Sep 22nd, 2026
New framework enhances reproducibility and transparency in AI model evaluation.

New framework enhances reproducibility and transparency in AI model evaluation. A collaboration between the UK AI Safety Institute and Hugging Face introduces EvalEval, a framework designed to standardize and improve the transparency of AI model benchmark results, addressing critical challenges in reliable evaluation. Published September 21, 2026 Addressing the reproducibility crisis in AI benchmarking. As artificial intelligence models grow in complexity and scope, the reliability and reproducibility of their evaluations have become a paramount concern. The proliferation of benchmarks and the nuanced variations in evaluation methodologies often lead to inconsistent or incomparable results, hindering true progress and trustworthy assessments. A significant step towards resolving this challenge has been taken through a collaborative effort between the UK AI Safety Institute (UK AISI) and Hugging Face, resulting in the development of EvalEval. This novel framework aims to standardize the reporting and execution of AI model evaluations, providing a robust solution for researchers and developers to ensure their benchmark results are not only accurate but also verifiable and transparent. By fostering a more consistent approach to evaluation, EvalEval is poised to enhance the integrity of AI research and development across the industry. Introducing EvalEval: A unified evaluation ecosystem. EvalEval is designed as a comprehensive system for evaluating large language models (LLMs) and other AI models, emphasizing reproducibility and transparency. It leverages Hugging Face's existing ecosystem, integrating deeply with the Hugging Face Hub, datasets, and models. The core idea is to encapsulate an entire evaluation setup - including the model, evaluation code, data, and environment - within a single, shareable artifact. This artifact, often a repository on the Hub, ensures that anyone can rerun the exact evaluation and obtain identical results. Key features of EvalEval include explicit versioning of all components, from evaluation scripts to the specific model checkpoints used. It supports various evaluation types, from traditional benchmarks to more complex adversarial tests, and provides tools for visualizing and comparing results. This structured approach directly tackles the "reproducibility crisis" in AI, where published results are frequently difficult or impossible to replicate due to undocumented variables or proprietary setups. How EvalEval facilitates transparent benchmarking. At its heart, EvalEval functions by creating a traceable and auditable record of each evaluation. When an evaluation is conducted using the framework, all necessary information is meticulously recorded. This includes the exact commit hash of the model used, the specific version of the evaluation script, the dataset split, and even the computational environment specifications. These details are then packaged and made accessible, typically through a dedicated repository on the Hugging Face Hub. For developers, this means no more guessing which model version yielded which score, or struggling to recreate a testing environment. For researchers, it offers a verifiable path to confirming published results. The framework also supports the creation of "evaluation cards" and "results cards," which provide human-readable summaries of the evaluation methodology and outcomes, further enhancing transparency and ease of understanding for the broader AI community. Impact on AI Safety and development. The UK AI Safety Institute's involvement underscores the critical role of reproducible evaluations in ensuring AI safety. For high-stakes applications, understanding precisely how models perform and the conditions under which those performances were achieved is non-negotiable. EvalEval provides a foundational tool for rigorous safety assessments, allowing for the consistent testing of alignment, bias, and robustness across different models and iterations. Beyond safety, the framework benefits general AI development by accelerating innovation. Developers can more confidently build upon existing work, knowing that benchmark improvements are genuinely representative of enhanced model capabilities, rather than artifacts of evaluation discrepancies. This fosters a more reliable feedback loop for model training and refinement, ultimately leading to more robust and capable AI systems. Why it matters. EvalEval represents a significant leap forward in standardizing AI model evaluation. By making benchmark results transparent, reproducible, and verifiable, it addresses a core challenge that has long plagued AI research and development. This initiative will not only bolster confidence in reported AI performance metrics but also provide a crucial foundation for safer, more robust, and continually improving artificial intelligence systems across all sectors.

UK Tech News
Aug 21st, 2026
UK AI Security Institute appoints Henry de Zoete as director and Nate Burnikell as chief strategy officer

The UK government's AI Security Institute has appointed Henry de Zoete as director and Nate Burnikell as chief strategy officer. De Zoete, a long-term AI and technology adviser to the government, played a key role in establishing the Institute. He is also a tech founder whose startup Look After My Bills participated in Y Combinator's 2018 class. He replaces interim director Adam Beaumont, who is returning to GCHQ. Burnikell has worked across various government departments over the past decade, including the Cabinet Office and Department for Levelling Up. Most recently, he worked with the Department for Science, Innovation and Technology, under which the AI Security Institute was originally founded. The Institute researches issues regarding AI safety and national security.

Channel NewsAsia
May 5th, 2026
Microsoft, Google and xAI to give US government early access to AI models for security checks.

Microsoft, Google and xAI to give US government early access to AI models for security checks. 05 May 2026 08:00PM (Updated: 06 May 2026 04:40AM) Add CNA as a trusted source to help Google better understand and surface our content in search results. Read a summary of this article on FAST. WASHINGTON: Microsoft, Google and Elon Musk's xAI agreed to give the US government early access to new artificial intelligence models for national security testing, as US officials grow alarmed by the hacking capabilities of Anthropic's newly unveiled Mythos. The Centre for AI Standards and Innovation at the Department of Commerce said on Tuesday (May 5) that the agreement would allow it to evaluate the models before deployment and conduct research to assess their capabilities and security risks. The agreement fulfills a pledge the Trump administration made in July 2025 to partner with technology companies to vet their AI models for "national security risks." Microsoft will work with US government scientists to test AI systems "in ways that probe unexpected behaviours," the company said in a statement. Together they will develop shared datasets and workflows for testing the company's models, the company said. Microsoft signed a similar agreement with the UK's AI Security Institute, according to the statement. Concern is growing in Washington over the national security risks posed by powerful AI systems. By securing early access to frontier models, US officials are aiming to identify threats ranging from cyberattacks to military misuse before the tools are widely deployed. The development of advanced AI systems including Anthropic's Mythos has in recent weeks created a stir globally, including among US officials and corporate America, over their ability to supercharge hackers. "Independent, rigorous measurement science is essential to understanding frontier AI and its national security implications," CAISI Director Chris Fall said in a statement. The move builds on previous agreements with OpenAI and Anthropic, established in 2024 under the Biden administration when CAISI was known as the US Artificial Intelligence Safety Institute. Under former President Joe Biden, the institute focused on developing AI tests, definitions and voluntary safety standards. It was led by Biden tech adviser Elizabeth Kelly, who has since joined Anthropic, according to her LinkedIn profile. CAISI, which serves as the government's main hub for AI model testing, said it had already completed more than 40 evaluations, including on cutting-edge models not yet available to the public. Developers frequently hand over versions of their models with safety guardrails stripped back so the centre can probe for national security risks, the agency said. xAI did not immediately respond to a request for comment. Google declined to comment. Last week, the Pentagon said it had reached agreements with seven AI companies to deploy their advanced capabilities on the Defense Department's classified networks as it seeks to broaden the range of AI providers working across the military. The Pentagon announcement did not include Anthropic, which has been embroiled in a dispute with the Pentagon over guardrails on the military's use of its AI tools. Related topics.

Help Net Security
Mar 30th, 2026
Breaking out: can AI agents escape their sandboxes?

Breaking out: can AI agents escape their sandboxes? Container sandboxes are part of routine AI agent testing and deployment. Agents use them to run code, edit files, and interact with system resources without direct access to the host. The SandboxEscapeBench benchmark, developed by researchers at the University of Oxford and the AI Security Institute, evaluates whether an agent with shell access can escape a container and reach the host system. Evaluation architecture and scenario taxonomy (Source: AI Security Institute) What SandboxEscapeBench measures. SandboxEscapeBench places models in controlled container environments and tests whether they can retrieve a protected file from the host filesystem. Each scenario focuses on accessing /flag.txt outside the container boundary. The setup uses a nested design, with containers running inside virtual machines, ensuring that any successful escape remains contained within an outer isolation layer. The benchmark includes 18 scenarios spanning three layers of the container stack: orchestration, runtime, and kernel. These scenarios reflect known vulnerability classes such as exposed Docker sockets, writable host mounts, and privileged containers, as well as documented exploits like Dirty COW and Dirty Pipe. "For security and evaluation integrity reasons, we've limited the public release to scenarios based on known vulnerability classes, while retaining a private test set for internal AISI evaluations. The benchmark is implemented as capture-the-flag-style challenges using Inspect, AISI's open-source framework for AI evaluations, and the SandboxEscapeBench open-source code is available on GitHub," the researchers wrote. What the researchers have found. The evaluation shows that AI agents can exploit common configuration issues when prompted. Frontier models succeeded in scenarios involving exposed Docker sockets, writable host mounts, and privileged containers, well-known weaknesses that still appear in real-world environments. More complex tasks proved harder, especially those requiring multiple steps or deeper interaction with system components. Kernel-level exploits and advanced privilege escalation paths were not solved under the tested conditions. Performance increased with larger token budgets, since models explored more commands and execution paths during each attempt. Providing hints about the underlying vulnerability improved results for some models, enabling them to reach solutions more with fewer steps, while others showed little change under the same conditions. The researchers also analyzed how models behaved during these attempts, noting that some stopped early when progress stalled, while others continued with multiple approaches, including repeated incorrect ones. Some models reported success before completing the task, while others verified the result before stopping. All successful escapes relied on known misconfigurations or publicly disclosed vulnerabilities, and the tests did not identify new flaws. SandboxEscapeBench and its tooling are available as open-source resources for security researchers and evaluators tracking AI agent breakout capabilities. More about

Recently Posted Jobs

Sign up to get curated job recommendations

AI Security Institute is Hiring for 3 Jobs on Simplify!

Find jobs on Simplify and start your career today

Don't see your dream role? Check out thousands of other roles on Simplify. Browse all jobs