Excited to release our new whitepaper, Enterprise Agent and Model Security, written with co-authors from
@uiuc_aisecure Bo Li's team at the University of Chicago and UIUC, covers three key enterprise AI and security topics. It maps the attack surface. It identifies eight vulnerability classes that standard application-security tooling isn't built to find. And it proposes a hardened enterprise architecture.
We also put Pokee-Isaac 28B v0.1 (Preview) to the test based on the vulnerabilities identified above. We ran it on DecodingTrust-Agent alongside five widely used models: GPT-5.6 Luna, Claude Haiku 4.5, Gemini 3.5 Flash-Lite, Qwen3.5-122B and Nemotron 3 Super 120B. Every model ran on the same 12 domains with the same judge, about 6,200 tasks each.
Pokee-Isaac came out ahead on every measure:
• Indirect prompt-injection success: 8.3%, vs 36.7% for the next best model
• Direct attack success: 30.5%, vs 37.7% for the next best model
• Benign task success: 85.6%, the highest of the six
The usual assumption is that robustness costs capability. Here it didn't.
Thank you to my co-authors Christopher Wu,
@zrrrr_cn, Yiqing Cai and
@uiuc_aisecure .
Blog:
pokee.ai/security/agent-secu…
Paper:
pokee.ai/research/pokee-ai-s…
And yes Isaac v0.1 is coming soon. Talk to us to build on top of the most trustworthy model for your private deployment.