Microsoft launches Rampart and Clarity: Open source for offensive security in AI

Microsoft has just made available two new open source tools — Rampart and Clarity — aimed at offensive security in artificial intelligence. While Rampart helps developers perform red teaming on active systems, Clarity focuses on incident response. Both expand the capabilities of the PyRIT framework and signal a more aggressive posture of Redmond's giant against vulnerabilities in AI models.

What are Rampart and Clarity on offensive security in AI?

Rampart is a red teaming tool designed specifically for developers working with active software — AI systems that take standalone actions on behalf of the user. It automates controlled attacks to identify faults before they are exploited. Clarity, in turn, is focused on incident response teams, allowing us to track and analyze suspicious activities in AI environments more quickly. Both are open source and integrate into PyRIT, Microsoft's security framework, which was already used to simulate threats.

How does Rampart and Clarity work in practice?

Rampart simulates prompt injection attacks, data extraction and behavior manipulation, generating detailed reports for developers. Clarity collects logs and traffic patterns to identify anomalies, suggesting real-time containment actions. Microsoft has published the code in GitHub with technical documentation that allows adaptation to different scenarios, from chatbots to corporate automation systems.

Why does offensive security in AI matter to Brazilian developers?

With the increasing use of AI agents in startups and large companies in Brazil, the security of these systems becomes critical. Open tools like Rampart and Clarity democratize access to security practices that were previously restricted to large cybersecurity teams. In addition, while governments like United Kingdom require companies to mitigate cyber risks from AI models, having open source solutions aligned with mature frameworks such as PyRIT helps Brazilian developers anticipate future regulation.

What is the relationship between Rampart, Clarity and the PyRIT ecosystem?

PyRIT (Python Risk Identification Toolkit) is Microsoft's umbrella for offensive AI security. Rampart and Clarity are the first two official plugins of this ecosystem. The strategy is to create a modular suite that covers the entire safety life cycle: prevention (Rampart), detection (Clarity) and response (future tools). This makes PyRIT a de facto standard for red teaming in AI agents, competing with proprietary solutions from Anthropic and Google.

Frequently Asked Questions about Offensive Security in AI

Rampart and Clarity are free?

Yes, both are open source and are available free of charge on Microsoft GitHub under MIT license.

Do I need security experience to use?

Rampart is focused on developers with basic knowledge of red teaming; documentation includes step-by-step guides. Clarity requires familiarity with incident response, but also offers initial templates.

Do these tools work with any AI model?

They are model agnostics, but optimized for active systems built with the Azure OpenAI ecosystem. They also work with third-party APIs, as long as adapted via PyRIT.