Research
BRANCH: Bypassing Multi-Scanner AI Guardrails
Publication date unknown · Discovered mindgard.ai
Page published
Publication date unknown · First observed: 24 Oct 2026
Coverage timeline
Single-source research — one report is available.
Why it matters
BRANCH challenges the assumption that stacking AI guardrail scanners provides reliable protection, highlighting the need to test combined defenses against adaptive and transferable evasions.
BRANCH is a tree-based methodology from Mindgard and Lancaster University for generating prompts that evade multiple AI guardrail scanners simultaneously. The researchers report 100% attack success across 120 evaluated bypass scenarios, with generated bypasses transferring to 29 unseen guardrails, including eight commercial offerings, and increasing attack success by an average of 32.9 percentage points.