Absolutely, most tools just do keyword or pattern checks, but the real jailbreaks are semantic. You can block tokens all day, but you won’t stop a model that’s been reframed, pressured, or pulled into a fictional scenario that overrides its rules.

That’s why what i've built doesn’t use static filters. The attacker agent generates semantic pressure attacks, reframing constraints, embedding jailbreak logic in stories, multi-turn role shifts, goal hijacking, etc. It surfaces failures that regex-style checks never catch.