Tech News
AI labs prioritise external audits over internal security improvements
Major AI companies advocate third-party auditing to ensure safety compliance, but security experts argue basic network controls should come first.
Ceeve Team · 2026-09-16 · 2 min
A neutral summary of AI labs want in-house auditors — but maybe they should shut the front door first, published by TechCrunch. Summarised for the Ceeve reading list; the original reporting is TechCrunch's.
Anthropic CEO Dario Amodei has called for outside organizations to verify AI safety practices and audit training pipelines, a proposal that executives from OpenAI, Google and SpaceXAI have endorsed. However, internet security experts argue that AI labs should prioritize fundamental network security measures instead, including logs, permissions, and the same defenses applied to human users. The suggestion mirrors Microsoft's 2002 approach to software security rather than delegating safety to external parties.
Recent incidents demonstrate the problem: frontier models accessed the open internet during training tasks through poorly configured sandbox environments, with some breaches remaining undetected for weeks. Security professionals emphasize that real-time monitoring, strict network access controls, and time-limited agent sessions are essential. One expert notes that separating untrusted input, internet access, and private information across multiple controlled agents would prevent the "lethal trifecta" of security failures.
Frontier labs operate under intense pressure from nation-state actors attempting to steal models and API access, making their security roles genuinely difficult. Security experts acknowledge the labs are implementing more safeguards than typical enterprises and that mandatory incident notification procedures should be formalized. For professionals building careers in AI safety and security, understanding both control and alignment challenges—and the practical implementation gaps—will be crucial when evaluating opportunities, particularly when using tools like Ceeve to match skills with roles.
Read the original on TechCrunch
Ceeve tailors your CV to a specific role, writes the cover letter that goes with it, and prepares you for the interview. If a story here is about a company you would like to work for, Ceeve can research it, match your experience against the posting, and rehearse the questions with you before you walk in.