Safely manage your Zendesk from the AI assistant you already use, via the Deltastring MCP. Beacon configuration platform
← Back to news

ASAPP Integrates Continuous Red Teaming Into Enterprise AI Platform

ASAPP has integrated continuous red teaming into its Customer Experience Platform, embedding real-time adversarial testing directly into its model evaluation framework through a partnership with Promptfoo. The capability screens for over 50 vulnerability types across three security domains: core model integrity (jailbreaking, system overrides, hallucinated authority), data privacy and knowledge base security (prompt injection, PII leakage in RAG deployments), and agentic operational security (unauthorized data access, network reconnaissance, tool-calling exploitation). Rather than relying on static safety filters or one-time audits, ASAPP now tracks Attack Success Rate metrics for each model update, aligning results with OWASP Top 10 and NIST frameworks to produce audit-ready safety data continuously. This represents a fundamental shift in how enterprise CX platforms approach AI governance—moving from post-deployment verification to embedded, ongoing adversarial testing.

The implications for CX teams are substantial. As AI agents transition from answering questions to executing actions within customer interactions, the attack surface expands dramatically, and teams deploying agentic systems now face genuine security accountability. For organisations already running multi-agent deployments or considering platforms like Salesforce Agentforce, the question becomes whether continuous red teaming will become table stakes for procurement—that is, whether security teams will demand this level of real-time vulnerability visibility before approving enterprise AI investments. ASAPP's move signals that vendors without embedded adversarial testing frameworks may struggle to satisfy CISO and procurement requirements, particularly in regulated industries where audit trails and measurable safety metrics are non-negotiable.

The broader tension here is between speed and trust. CX leaders want AI agents that resolve issues faster and reduce human workload, but security and compliance teams need proof that those agents cannot be manipulated into exposing PII, making unauthorised commitments, or becoming vectors for internal network attacks. ASAPP's framing—that "trust has to be earned through specific metrics, a clear approach, and a regular reporting system"—directly challenges the vendor-as-trusted-partner model that has dominated CX platform relationships. This creates an opportunity for teams to demand similar transparency from competitors, but it also raises the bar for implementation complexity and ongoing governance overhead.