RISE

Automated red-teaming framework for text-to-image models that evolves natural-language attack strategies, uses an attacker LLM to craft prompts and a vision-language judge to score whether generated images bypass safety filters. Ships a full search pipeline with provider adapters for hosted targets such as DALL·E 3 and GPT-Image plus a local FLUX testbed. Accepted at NeurIPS 2026.