cd /news/ai-safety/openai-help-lockdown-mode · home topics ai-safety article
[ARTICLE · art-23026] src=simonwillison.net pub= topic=ai-safety verified=true sentiment=↑ positive

OpenAI Help: Lockdown Mode

OpenAI introduced Lockdown Mode to block outbound network requests that could exfiltrate sensitive data during the final stage of a prompt injection attack. The feature does not prevent prompt injections from appearing in ChatGPT content, but it targets the data exfiltration leg of the "Lethal Trifecta" — the combination of private data access, untrusted content exposure, and a data-stealing channel. By cutting off the exfiltration vector with deterministic, non-AI mechanisms, Lockdown Mode aims to secure LLM systems without reducing their usefulness.

read1 min publishedJun 6, 2026

Lockdown Mode is designed to help prevent the final stage of data exfiltration from a prompt injection attack by limiting outbound network requests that could transfer sensitive data to an attacker. Lockdown Mode does not prevent prompt injections from appearing in the content ChatGPT processes. For example, a prompt injection could appear in cached web content or in an uploaded file, and could still affect the behavior or accuracy of a response.

This looks really good to me.

The Lethal Trifecta occurs when an LLM system has access to all three of access to private data, exposure to untrusted content and a way to steal data and transmit it back to the attacker.

The only way to solve the trifecta is to cut off one of the three legs, and by far the easiest leg to restrict without making your LLM systems far less useful is the exfiltration vectors to steal data.

It looks to me like lockdown mode directly attacks that leg, using mechanisms that are deterministic and, crucially, are not evaluated by AI systems that themselves can be subverted by sufficiently devious attacks.

Tags: security, ai, openai, prompt-injection, llms, lethal-trifecta

── more in #ai-safety 4 stories · sorted by recency
sponsored brought to you by zahid.host 4,200+ EU-deployed projects
reading about agents? ship yours in a single git push.

Run your AI side-project on zahid.host

EU-based hosting, git-push deploys, automatic HTTPS, no cold starts. Free tier with a custom domain — perfect for shipping the agent you just read about.

$git push zahid main
Live at https://your-agent.zahid.host
Get free account → Pricing
from €0/mo · no card required
LIVE [news/openai-help-lockdown…] indexed:0 read:1min 2026-06-06 ·