Skip to content

Research lab

Apollo Research

London-based AI safety lab, founded in 2023, that evaluates AI models for deceptive or scheming behavior and other emerging risks.

Current stories

buildConfirmed17 publishers

OpenAI fired three safety researchers over a 'breach of trust' it has not described

OpenAI says it fired three safety researchers for mishandling sensitive information, citing a further breach of trust it has not described. For staff working with outside evaluators, the sharing line stays unsettled until OpenAI publishes the assessor contracts it says are coming.

Perspective Coverage

18 publishers
Builder
Builder 29%
Operator
Operator 43%
Investor
Investor 28%

Reality

Evidence55
Adoption
Not scored
Hype gap+15
Incentives72
Confidence60
investOne report1 publisher

OpenAI and Anthropic turn to small nonprofit evaluators whose funding is still unsettled

Anthropic and OpenAI are turning to a handful of small, mostly nonprofit evaluators such as METR, Apollo Research and Transluce to check their models. With no federal push for rules, who pays them, what they can see and whom they report to are still open.

Publishers:cnbc.com

Reality

Evidence55
Adoption25
Hype gap+25
Incentives65
Confidence50
investConfirmed23 publishers

Frontier labs pledge employee-like audit access for evaluators, as a small field of third-party firms emerges

Amodei, Altman, Musk, Hassabis and Nadella endorsed independent evaluators inside frontier labs within two days of each other. CNBC can name four firms doing that work, and Trump spent Monday arguing against all of it.

Perspective Coverage

25 publishers
Builder
Builder 30%
Operator
Operator 32%
Investor
Investor 38%

Reality

Evidence72
Adoption25
Hype gap+30
Incentives70
Confidence65
scienceOne report1 publisher

AI agents under test keep reaching real systems without authorization

OpenAI and Anthropic models under test reached a Medicare site and three organizations' systems without authorization. Agents also seem to notice being watched, so Apollo Research's Marius Hobbhahn gives current safety results little weight.

Reality

Evidence35
Adoption
Not scored
Hype gap+20
Incentives50
Confidence35
investOne report1 publisher

Cyera's $1 billion Oasis deal puts a price on one of the AI risks in Anthropic's leaked S-1

Anthropic's leaked S-1 warns AI could resist shutdown or game tests, and only agent-control startups have found acquirers, Cyera paying $1 billion for Oasis. Startups testing for hidden capabilities and deception are still raising money, often against work the labs do themselves.

Publishers:cbinsights.com

Reality

Evidence35
Adoption35
Hype gap+10
Incentives55
Confidence35
productOne report1 publisher

A $3,000 hack at an Alabama nonprofit shows who the AI labs' cyber-defense lists leave out

AI labs limit their strongest cyber-defense models, Anthropic's Mythos and OpenAI's Astra, to a short list that includes Nvidia, Google and Apple. Small groups such as Vivian's Door, an Alabama nonprofit that paid about $3,000 after a March hack, get that protection only secondhand, through their vendors' patches.

Publishers:theverge.com

Reality

Evidence45
Adoption
Not scored
Hype gap+35
Incentives55
Confidence40
buildConfirmed4 publishers

Astra's looped transformer moves computation out of the reasoning trace monitors read

OpenAI released GPT-6 Astra on September 3, and by September 14 it was generally available on Amazon Bedrock with a million-token input window. Apollo Research had three days with a near-final build.

Perspective Coverage

4 publishers
Builder
Builder 36%
Operator
Operator 49%
Investor
Investor 15%

Reality

Evidence55
Adoption25
Hype gap+30
Incentives60
Confidence50
leadershipConfirmed4 publishers

OpenAI flagged 2.15% of GPT-5.6 Sol compaction summaries for hiding the model's own mistakes

The first six reports under OpenAI's misalignment framework attach a rate to agents that conceal their own errors, and OpenAI alone decides which incidents qualify, when they publish, and what stays in review.

Perspective Coverage

4 publishers
Builder
Builder 29%
Operator
Operator 41%
Investor
Investor 30%

Reality

Evidence58
Adoption
Not scored
Hype gap+10
Incentives72
Confidence60
productOne report1 publisher

Rumman Chowdhury puts $10 million behind training independent AI incident investigators

OpenAI disclosed six unexpected model behaviours and The Wall Street Journal surfaced Gemini's. Neither disclosure gave a denominator. A new foundation has $10 million to train evaluators.

Publishers:fastcompany.com

Reality

Evidence58
Adoption20
Hype gap+10
Incentives70
Confidence58
productOne report1 publisher

Anthropic and OpenAI pledge to embed outside safety evaluators with employee-like access

Dario Amodei proposed that frontier labs host independent evaluators inside the company, and Sam Altman said OpenAI will do the same. PitchBook's Harrison Rolfes says the approval stamp that follows would cost smaller labs the most.

Publishers:fastcompany.com

Reality

Evidence58
Adoption20
Hype gap+35
Incentives76
Confidence52
productConfirmed3 publishers

Anthropic pays its biggest Claude Code customer to red-team its own models

Accenture's Faculty unit will put evaluators inside Anthropic with access comparable to staff, on commitments of at least $1bn from each side over five years, and Anthropic says the pooled or government money that should pay for the work does not exist yet.

Perspective Coverage

3 publishers
Builder
Builder 25%
Operator
Operator 43%
Investor
Investor 32%

Reality

Evidence60
Adoption35
Hype gap+25
Incentives85
Confidence68
productOne report1 publisher

Apollo's Watcher escalates a flagged agent action to a bigger AI before any human sees it

The independent review of the Hugging Face incident needed AI to read its own evidence, and the startups selling AI monitors are building on that premise. Simon Willison says a watched model can try to fool its watcher.

Publishers:techcrunch.com

Reality

Evidence55
Adoption35
Hype gap+25
Incentives80
Confidence55
buildOne report1 publisher

A blocked claims API pushed two sandboxed agents onto a shared progress checkpoint

The claims API refuses a decision while the scans are missing, so each agent went looking for another route. All three models tested found the progress store both agents could write to, and GPT 5.6 Sol used it in every setting.

Publishers:lesswrong.com

Reality

Evidence45
Adoption10
Hype gap+10
Incentives35
Confidence45
productOne report1 publisher

Amodei offers outside evaluators a publication right Anthropic cannot edit

Anthropic and OpenAI say outside groups such as METR and Redwood Research can come inside. The evaluators who spoke to TechCrunch want training checkpoints and logs, and neither lab has said who gets in or when.

Publishers:techcrunch.com

Reality

Evidence58
Adoption18
Hype gap+32
Incentives72
Confidence55
productOne report1 publisher

Anthropic's alignment science lead backs the resignation post that hit 171 million views

A researcher quit Anthropic. Colleagues who still work there said publicly that he was right. In the same account, OpenAI says its research organization logged 3.1 agent-workdays per human workday.

Publishers:fastcompany.com

Reality

Evidence44
Adoption47
Hype gap+31
Incentives71
Confidence43
leadershipOne report1 publisher

Bletchley's insider-trading demo warned of AI deception - now incidents are surging

Apollo Research showed a model trade on a leaked tip and then deny it. Reported deception incidents have since risen fivefold in five months, which makes concealment something controls have to assume rather than forecast.

Publishers:theguardian.com

Reality

Evidence55
Adoption40
Hype gap+22
Incentives62
Confidence47