Red-team strategy

BEAST (beam-search adversarial suffix)

beast

Beam Search-based adversarial-suffix optimizer (Sadasivan et al. 2402.15570). Maintains a beam of best-scoring suffixes, expands each with candidate tokens per step, and prunes to the top-k — the beam-search peer to GCG/AutoDAN. The static transform runs a deterministic beam search over a benign token pool; runAdaptive drives the iterative optimization against a live target.

YAML config

evalguard.config.yaml

redteam:
  strategies:
    - beast

CLI

bash

# "beast" is layered onto attacks during red-team scans.
# List every available encoding/obfuscation strategy:
evalguard list strategies

Combine with attack plugins to generate adversarial payloads. The strategy wraps each base payload before it's sent to your target, testing whether the model decodes / unwraps the transform and follows the embedded instruction.