Skip to main content
Arafat Ansari

Arafat Ansari

Founder
KageX AI Security
I'm the founder at KageX, where we work on AI security / offensive security / LLM safety/ Trainings. We have recently shipped Mirage, an open-source autonomous red-team agent for testing AI systems against prompt injection, adversarial testing and policy bypass. With 7+ years of experience specialising in AI security, LLM red teaming, and adversarial testing infrastructure. I design offensive platforms, labs, and large-scale testing environments to discover how AI systems fail in real-world conditions. Our work focuses on making adversarial AI testing reproducible and evidence-based rather than reliant on models grading themselves.

Speaker sessions

Briefings and Arsenals | Confirmed Speakers | No Session Assigned

Placeholder session for confirmed speakers without an assigned session, allowing them to be pushed to Swapcard and Visit.
  • 07:30
  • Tue
  • 01 Dec
Stage: Briefing Stage 2
Sessions Type: Keynote

Mirage: An Autonomous AI Red-Team Agent in the Browser

Mirage is an open-source browser extension that autonomously red-teams AI systems - chat interfaces, agents, and API endpoints - for vulnerabilities such as prompt injection, system-prompt extraction, and policy bypass. Rather than replaying a fixed list of jailbreak payloads, Mirage runs a continuous adversarial loop: reconnaissance -> planning -> testing -> judgment -> iteration. It fingerprints the target, forms hypotheses about its guardrails, executes crafted attacks, analyses the response, and adapts its next move - behaving like a persistent human red-teamer instead of a static scanner.

This session demonstrates Mirage live against real AI chat UIs and API endpoints. Attendees will watch the agent reason in real time, pivot its strategy when a defense holds, and see why its results are trustworthy. 

Built as an MV3 extension, Mirage supports multiple providers - Claude, OpenAI, Grok, and local Ollama - as both attacker and judge. Findings map to OWASP-LLM categories and export as HTML/JSON reports with executive summaries. We'll cover the architecture, configure a live engagement and run a full attack against a real target.
  • 16:20
  • Tue
  • 01 Dec
Stage: Arsenal 1
Sessions Type: Demo