Meet Rampart and Clarity, Microsoft\u2019s new red team combo AI agents | CyberScoop<\/title> <meta name=\"description\" content=\"Microsoft\u2019s AI red team lead talked to CyberScoop about the goals behind open sourcing a pair of security tools meant for developers and incident responders.\"> <link rel=\"canonical\" href=\"https:\/\/cyberscoop.com\/microsoft-rampart-clarity-agentic-ai-security-red-teaming-tools\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"Meet Rampart and Clarity, Microsoft\u2019s new red team combo AI agents\"> <meta property=\"og:description\" content=\"Microsoft\u2019s AI red team lead talked to CyberScoop about the goals behind open sourcing a pair of security tools meant for developers and incident responders.\"> <meta property=\"og:url\" content=\"https:\/\/cyberscoop.com\/microsoft-rampart-clarity-agentic-ai-security-red-teaming-tools\/\"> <meta property=\"og:site_name\" content=\"CyberScoop\"> <meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cyberscoop\/\"> <meta property=\"article:published_time\" content=\"2026-05-20T20:25:51+00:00\"> <meta property=\"article:modified_time\" content=\"2026-05-20T20:25:53+00:00\"> <meta name=\"author\" content=\"djohnson\"> <meta name=\"twitter:card\" content=\"summary_large_image\"> <meta name=\"twitter:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-5.jpg\"> <meta name=\"twitter:creator\" content=\"@CyberScoopNews\"> <meta name=\"twitter:site\" content=\"@CyberScoopNews\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Feed\" href=\"https:\/\/cyberscoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"CyberScoop \u00bb Comments Feed\" href=\"https:\/\/cyberscoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/cyberscoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1778775768g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/cyberscoop.com\/wp-content\/mu-plugins\/search\/elasticpress\/dist\/css\/related-posts-block-styles.min.css?m=1778005960g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/cyberscoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1775068334g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=13897d660a0ac2c9c7d1\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/cyberscoop.com\/wp-json\/\"><link rel=\"alternate\" title=\"JSON\" type=\"application\/json\" href=\"https:\/\/cyberscoop.com\/wp-json\/wp\/v2\/posts\/89103\"><meta name=\"generator\" content=\"WordPress 6.8.5\">\n<link rel=\"shortlink\" href=\"https:\/\/cyberscoop.com\/?p=89103\">\n<link rel=\"alternate\" title=\"oEmbed (JSON)\" type=\"application\/json+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fmicrosoft-rampart-clarity-agentic-ai-security-red-teaming-tools%2F\">\n<link rel=\"alternate\" title=\"oEmbed (XML)\" type=\"text\/xml+oembed\" href=\"https:\/\/cyberscoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fcyberscoop.com%2Fmicrosoft-rampart-clarity-agentic-ai-security-red-teaming-tools%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/cyberscoop.com\/wp-content\/uploads\/sites\/3\/2023\/01\/cropped-cs_favicon-2.png?w=270\"> <\/head><body class=\"wp-singular post-template-default single single-post postid-89103 single-format-standard wp-theme-scoopnewsgroup wp-child-theme-cyberscoop\" id=\"readabilityBody\"> <a href=\"https:\/\/cyberscoop.com\/microsoft-rampart-clarity-agentic-ai-security-red-teaming-tools\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--newsletter js-stickybar\" readability=\"0.82\"> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"25.504175365344\">\n<div class=\"single-article__header-content\" readability=\"34.44976076555\">\n<p> Microsoft\u2019s AI red team lead talked to CyberScoop about the goals behind open sourcing a pair of security tools meant for developers and incident responders. <\/p>\n<p>  <br \/>\n<audio id=\"audio-player\" src=\"https:\/\/wp-tts-cdn.api.scpnewsgrp.com\/cyberscoop\/89103\/english.openai.mp3\"><\/audio> <\/p>\n<div readability=\"11\">\n<div>\n<p>Listen to this article<\/p>\n<p>  <\/p>\n<p>0:00<\/p>\n<\/p><\/div>\n<p>  <\/p>\n<p> <span id=\"tts-tooltip\">Learn more.<\/span> <span> This feature uses an automated voice, which may result in occasional errors in pronunciation, tone, or sentiment. <\/span> <\/p>\n<\/div>\n<p>  <\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"426\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents.jpg?resize=640%2C426&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-5.jpg 8256w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-5.jpg?resize=300,200 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-5.jpg?resize=768,512 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-5.jpg?resize=1024,683 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-5.jpg?resize=1536,1024 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-5.jpg?resize=2048,1365 2048w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-5.jpg?resize=600,400 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-5.jpg?resize=252,168 252w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-5.jpg?resize=506,337 506w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-5.jpg?resize=1013,675 1013w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-5.jpg?resize=1265,843 1265w\" sizes=\"(max-width: 1013px) 100vw, 1013px\"><figcaption> (Photo by Horacio Villalobos#Corbis\/Corbis via Getty Images) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"38.306129722024\"><body readability=\"79.04928591431\"><\/p>\n<p>On Wednesday, Microsoft released two new red teaming tools\u2014<a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/05\/20\/introducing-rampart-and-clarity-open-source-tools-to-bring-safety-into-agent-development-workflow\/#rampart-continuous-safety-testing-for-agentic-ai\">Rampart<\/a> and <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/05\/20\/introducing-rampart-and-clarity-open-source-tools-to-bring-safety-into-agent-development-workflow\/#clarity-helping-check-software-engineering-assumptions\">Clarity<\/a>\u2014,meant to help developers design more secure agentic software and assist incident responders in the face of ongoing breaches.<\/p>\n<p><a href=\"https:\/\/github.com\/microsoft\/RAMPART\">Rampart is built<\/a> on top of PyRIT, an existing <a href=\"https:\/\/github.com\/Azure\/PyRIT\">open automation framework<\/a> Microsoft developed for red teaming generative AI systems. But while PyRIT scans already-built systems for security flaws, Rampart is made to continuously test code for vulnerabilities during the development process, encoding both adversarial and benign testing scenarios into the software development pipeline to flag exploitable bugs and dependencies.<\/p>\n<p>Microsoft said Rampart was built to focus on cross-<a href=\"https:\/\/cyberscoop.com\/openai-chatgpt-atlas-prompt-injection-browser-agent-security-update-head-of-preparedness\/\">prompt injection attacks<\/a>, where \u201can agent retrieves or processes potentially poisoned content from documents, emails, tickets, and other data sources that manipulate behavior indirectly.\u201d It also confirms fixes or exploits work as intended through multiple rounds of testing, as opposed to tools that perform \u201csingle shot validation.\u201d<\/p>\n<p>The second tool, <a href=\"https:\/\/github.com\/microsoft\/clarity-agent\/\">Clarity<\/a>, can be run as a desktop app, a web interface or directly embedded into a coding agent to provide real time security engineering guidance to developers at the outset of a project. It can categorize and track different business objectives related to the code and highlight downstream security implications along with more secure by design alternatives.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Ram Shankar Siva Kumar, who founded Microsoft\u2019s AI red team in 2019, told CyberScoop that the company has seen internal security benefits from using the tools, but believesRampart and Clarity\u2019s growth depends on contributions from other developers outside the Microsoft ecosystem.<\/p>\n<p>In the fast-moving world of AI, where vibe coding, rogue AI agents and a steady churn of new model releases create fresh security implications nearly every week, Siva Kumar said it was important to begin building foundational, AI-centric security processes into the software development pipeline.<\/p>\n<p>\u201cWhen you hear a lot of talk about AI safety and security, it seems to be a lot of philosophical debates,\u201d he said. \u201cYou\u2019ll see frameworks, you\u2019ll see white papers, and I think we\u2019re really past that time, now. We really need to start thinking of AI safety as an engineering discipline and trying to bring security where the developers are.\u201d<\/p>\n<p>Rampart\u2019s potential utility to defenders goes beyond just securing software development pipelines. It can also be used during an active incident response to speed up or automate red teaming for hot fixes, patching and remediation.<\/p>\n<p>Microsoft has used Rampart when investigating reported vulnerabilities in their own products. Siva Kumar said the tool was able to help condense a week\u2019s worth of manual work- replicating the vulnerability, identifying different variants of the same bug, then patching and re-testing those variants to ensure they\u2019re no longer exploitable \u2013 into hours.Clarity, meanwhile, acts as a security adviser for software projects, prompting developers to consider potential risks in their design decisions and their downstream security consequences. . With the rise of AI-generated code and agents, and execution becoming cheaper, this kind of proactive guidance is increasingly important.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>\u201cYou\u2019re going to be able to create apps, create MCP servers to pull things out from the internet,\u201d said Siva Kumar. \u201cThe question is should you be doing it? and Clarity is a step in that direction. It is asking \u2018hey, should you be doing this in the first place?\u2019\u201d<\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"3.1083202511774\">\n<div class=\"author-card\" readability=\"13\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-1.jpg?w=640&ssl=1\" alt=\"Derek B. Johnson\"> <\/figure>\n<\/p><\/div>\n<p><h4 class=\"author-card__name\">Written by Derek B. Johnson<\/h4>\n<p> Derek B. Johnson is a reporter at CyberScoop, where his beat includes cybersecurity, elections and the federal government. Prior to that, he has provided award-winning coverage of cybersecurity news across the public and private sectors for various publications since 2017. Derek has a bachelor\u2019s degree in print journalism from Hofstra University in New York and a master\u2019s degree in public policy from George Mason University in Virginia. <\/p>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<div class=\"popular-stories popular-stories--single-post\">\n<div class=\"popular-stories__container\">\n<h2 class=\"popular-stories__title\"> More Scoops <\/h2>\n<div class=\"popular-stories__stories\">\n<div class=\"popular-stories__cards\">\n<article class=\"post-item post-item--popular-stories-cards \" readability=\"18.725806451613\">\n<figure class=\"post-item__thumbnail\"> <a class=\"post-item__thumbnail-link\" href=\"https:\/\/cyberscoop.com\/booz-allen-report-ai-helps-attackers-move-faster-than-current-defenses\/\" tabindex=\"-1\"> <img data-recalc-dims=\"1\" loading=\"lazy\" width=\"449\" height=\"337\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-2.jpg?resize=449%2C337&ssl=1\" class=\"attachment-ratio-16-9-md size-ratio-16-9-md wp-post-image\" alt decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-6.jpg 2000w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-6.jpg?resize=300,225 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-6.jpg?resize=768,576 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-6.jpg?resize=1024,768 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-6.jpg?resize=1536,1152 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-6.jpg?resize=600,450 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-6.jpg?resize=224,168 224w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-6.jpg?resize=449,337 449w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-6.jpg?resize=900,675 900w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-6.jpg?resize=1124,843 1124w\" sizes=\"auto, (max-width: 449px) 100vw, 449px\"> <\/a><figcaption class=\"screen-reader-text\"> (Getty Images) <\/figcaption><\/figure>\n<header class=\"post-item__meta\" readability=\"2.7118644067797\">\n<h3 class=\"post-item__title\"> <a class=\"post-item__title-link\" href=\"https:\/\/cyberscoop.com\/booz-allen-report-ai-helps-attackers-move-faster-than-current-defenses\/\"> Attackers are exploiting AI faster than defenders can keep up, new report warns <\/a> <\/h3>\n<p> Cybersecurity is entering \u201ca new phase\u201d as artificial intelligence tools have matured and given IT defenders significantly less time to respond to cyberattacks and other threats, according\u2026 <\/p>\n<div class=\"post-item__byline\"> <span class=\"post-item__author\"> <span>By <\/span> <a class=\"post-item__author-link\" href=\"https:\/\/cyberscoop.com\/author\/derek-johnson\/\"> Derek B. Johnson <\/a> <\/span> <\/div>\n<p> <\/header>\n<p> <\/article>\n<article class=\"post-item post-item--popular-stories-cards \">\n<figure class=\"post-item__thumbnail\"> <a class=\"post-item__thumbnail-link\" href=\"https:\/\/cyberscoop.com\/amazon-perplexity-comet-browser-injunction\/\" tabindex=\"-1\"> <img data-recalc-dims=\"1\" loading=\"lazy\" width=\"252\" height=\"168\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-3.jpg?resize=252%2C168&ssl=1\" class=\"attachment-ratio-16-9-sm size-ratio-16-9-sm wp-post-image\" alt decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-7.jpg 5000w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-7.jpg?resize=300,200 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-7.jpg?resize=768,512 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-7.jpg?resize=1024,683 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-7.jpg?resize=1536,1024 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-7.jpg?resize=2048,1365 2048w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-7.jpg?resize=600,400 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-7.jpg?resize=252,168 252w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-7.jpg?resize=506,337 506w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-7.jpg?resize=1013,675 1013w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-7.jpg?resize=1265,843 1265w\" sizes=\"auto, (max-width: 252px) 100vw, 252px\"> <\/a><figcaption class=\"screen-reader-text\"> HONG KONG, CHINA \u2013 2025\/03\/01: In this photo illustration, A new web browser \u2018Comet\u2019 by perplexity is seen on a computer. Perplexity have announced on Monday, Feb 24th, 2025, their plans to release \u2018Comet\u2019, a new web browser that aims to revolutionise browsing. (Photo Illustration by May James\/SOPA Images\/LightRocket via Getty Images) <\/figcaption><\/figure>\n<header class=\"post-item__meta\">\n<h3 class=\"post-item__title\"> <a class=\"post-item__title-link\" href=\"https:\/\/cyberscoop.com\/amazon-perplexity-comet-browser-injunction\/\"> Federal judge blocks Perplexity\u2019s AI browser from making Amazon purchases <\/a> <\/h3>\n<div class=\"post-item__byline\"> <span class=\"post-item__author\"> <span>By <\/span> <a class=\"post-item__author-link\" href=\"https:\/\/cyberscoop.com\/author\/derek-johnson\/\"> Derek B. Johnson <\/a> <\/span> <\/div>\n<p> <\/header>\n<p> <\/article>\n<article class=\"post-item post-item--popular-stories-cards \">\n<figure class=\"post-item__thumbnail\"> <a class=\"post-item__thumbnail-link\" href=\"https:\/\/cyberscoop.com\/agentic-ai-browsers-allow-hijacking-zenity-labs-comet\/\" tabindex=\"-1\"> <img data-recalc-dims=\"1\" loading=\"lazy\" width=\"261\" height=\"168\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-4.jpg?resize=261%2C168&ssl=1\" class=\"attachment-ratio-16-9-sm size-ratio-16-9-sm wp-post-image\" alt decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-8.jpg 7000w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-8.jpg?resize=300,193 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-8.jpg?resize=768,494 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-8.jpg?resize=1024,658 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-8.jpg?resize=1536,987 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-8.jpg?resize=2048,1317 2048w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-8.jpg?resize=600,386 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-8.jpg?resize=261,168 261w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-8.jpg?resize=524,337 524w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-8.jpg?resize=1050,675 1050w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2026\/05\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents-8.jpg?resize=1311,843 1311w\" sizes=\"auto, (max-width: 261px) 100vw, 261px\"> <\/a><figcaption class=\"screen-reader-text\"> Researchers at Zenity Labs discovered flaws affecting multiple AI browsers, including Perplexity\u2019s Comet. Before being patched, an attacker could exploit them via a legitimate calendar invite, using a prompt injection to force the AI browser to act against its user. (Image via Getty) <\/figcaption><\/figure>\n<header class=\"post-item__meta\">\n<h3 class=\"post-item__title\"> <a class=\"post-item__title-link\" href=\"https:\/\/cyberscoop.com\/agentic-ai-browsers-allow-hijacking-zenity-labs-comet\/\"> Researchers discover suite of agentic AI browser vulnerabilities <\/a> <\/h3>\n<div class=\"post-item__byline\"> <span class=\"post-item__author\"> <span>By <\/span> <a class=\"post-item__author-link\" href=\"https:\/\/cyberscoop.com\/author\/derek-johnson\/\"> Derek B. Johnson <\/a> <\/span> <\/div>\n<p> <\/header>\n<p> <\/article>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/div>\n<p>\n<\/div>\n<p> <\/p>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Government<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Technology<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to CyberScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/cyberscoop.com\/microsoft-rampart-clarity-agentic-ai-security-red-teaming-tools\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Meet Rampart and Clarity, Microsoft\u2019s new red team combo AI<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[235,5315,384,78,1156,4805,625,1073,4664,4570,2759],"tags":[236,5317,388,86,1168,4807,630,1076,4667,4571,2760],"class_list":["post-8662","post","type-post","status-publish","format-standard","hentry","category-ai","category-ai-agents","category-artificial-intelligence-ai","category-cybersecurity","category-incident-response","category-large-language-models","category-microsoft","category-open-source","category-prompt-injection","category-red-team","category-vulnerability-reporting","tag-ai","tag-ai-agents","tag-artificial-intelligence-ai","tag-cybersecurity","tag-incident-response","tag-large-language-models","tag-microsoft","tag-open-source","tag-prompt-injection","tag-red-team","tag-vulnerability-reporting"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/ai\/\" rel=\"category tag\">AI<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/ai-agents\/\" rel=\"category tag\">AI agents<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/artificial-intelligence-ai\/\" rel=\"category tag\">artificial intelligence (AI)<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybersecurity\/\" rel=\"category tag\">Cybersecurity<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/incident-response\/\" rel=\"category tag\">incident response<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/large-language-models\/\" rel=\"category tag\">large language models<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/microsoft\/\" rel=\"category tag\">Microsoft<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/open-source\/\" rel=\"category tag\">open source<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/prompt-injection\/\" rel=\"category tag\">prompt injection<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/red-team\/\" rel=\"category tag\">red team<\/a> <a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/vulnerability-reporting\/\" rel=\"category tag\">vulnerability reporting<\/a>","tag_info":"vulnerability reporting","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/8662","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=8662"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/8662\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=8662"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=8662"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=8662"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":8662,"date":"2026-05-20T15:25:51","date_gmt":"2026-05-20T20:25:51","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=89103"},"modified":"2026-05-20T15:25:51","modified_gmt":"2026-05-20T20:25:51","slug":"meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2026\/05\/20\/meet-rampart-and-clarity-microsofts-new-red-team-combo-ai-agents\/","title":{"rendered":"Meet Rampart and Clarity, Microsoft\u2019s new red team combo AI agents"},"content":{"rendered":"