Safety & robustness benchmarks

Explore safety, security, truthfulness, and robustness under adversarial inputs. Read each metric's direction carefully: higher refusal or attack-success rates can have very different meanings.

Published

Updated:

Models tested: 28

Can autonomous agents craft PoC inputs that trigger OSS-Fuzz vulnerabilities—and produce source patches that fix them?

Top models · Vals AI

Latest result per model · 1.1

  1. 1Muse WonderMax80.36%
  2. 2GPT-6 SolMax77.98%
  3. 3Gemini 4 ArgonHigh77.86%
View details →

Updated:

Models tested: 28

Can autonomous agents craft PoC inputs that trigger OSS-Fuzz vulnerabilities—and produce source patches that fix them?

Top models · Vals AI

Latest result per model · 1.1

  1. 1GPT-5.6 SolMax89.29%
  2. 2Claude Haiku 5.5Max89.29%
  3. 3GPT-6 SolMax89.29%
View details →

Updated:

Models tested: 28

Can autonomous agents craft PoC inputs that trigger OSS-Fuzz vulnerabilities—and produce source patches that fix them?

Top models · Vals AI

Latest result per model · 1.1

  1. 1Muse WonderMax75%
  2. 2Gemini 4 ArgonHigh70%
  3. 3GPT-6 SolMax66.67%
View details →

Updated:

Models tested: 27

Conversational models have become a default place people turn during anxiety, grief, and acute distress. A growing share of that use is emotional, and within it users disclose…

Top models · scale

Latest result per model · Version not reported

  1. 1Muse Spark 1.288.39 source score
  2. 2Muse Spark 1.384.88 source score
  3. 3Muse Glimmer 30B80.57 source score
View details →

Updated:

Models tested: 31

The rapid advancement of large language models (LLMs) introduces powerful dual-use capabilities that could both threaten and bolster national security and public safety (NSPS).…

Top models · scale

Latest result per model · Version not reported

  1. 1DeepSeek R174.39 source score
  2. 2Qwen3 235B A22B61.39 source score
  3. 3DeepSeek V3.160.55 source score
View details →

Updated:

Models tested: 25

As AI systems become more powerful, autonomous, and agentic, users need confidence that these systems won't deceive them. A model that regularly produces statements contradicting…

Top models · scale

Latest result per model · Version not reported

  1. 1Claude Opus 4.6Non-thinking96.28 source score
  2. 2Claude Sonnet 4Thinking95.33 source score
  3. 3gpt-oss-120b92 source score
View details →

Updated:

Models tested: 16

Safety and social handling of simulated twenty-turn conversations with users vulnerable to delusional thinking. An ensemble of judges grades protective and risky behaviors; v1.2…

Top models · eq bench

Latest result per model · spiral-bench-v1.2

  1. 1Claude Sonnet 4.570.3%
  2. 2GPT-5.270.2%
  3. 3O363.4%
View details →

Updated:

Models tested: 11

The original Spiral-Bench protocol for simulated conversations with users vulnerable to delusional thinking. A single judge grades protective and risky behaviors; these legacy…

Top models · eq bench

Latest result per model · spiral-bench-v1.0

  1. 1O386.1%
  2. 2gpt-oss-120b81.4%
  3. 3Claude Sonnet 4.576.4%
View details →

Updated:

Models tested: 5

PropensityBench is a novel benchmark framework designed to evaluate the latent safety risks in LLMs. Traditional safety evaluations primarily test a model'scapabilities, leaving a…

Top models · scale

Latest result per model · Version not reported

  1. 1Gemini 2.5 Pro79 source score
  2. 2Gemini 2.0 Flash77.8 source score
  3. 3Qwen3 8B75.2 source score
View details →

Updated:

Models tested: 4

The Scale Adversarial Robustness Evaluation runs on 1,000 human-written prompts that are designed to trigger harmful responses from large language models. These prompts cover…

Top models · scale

Latest result per model · Version not reported

  1. 1Mistral Large37 source score
  2. 2GPT-4 Turbo Preview20 source score
  3. 3Gemini 1.5 Flash14 source score
View details →

Methodology and provenance

Benchize collects and structures public benchmark reports. Scores, costs, timings, ranks and uncertainty remain attributed to their original sources. Different versions, configurations and measurement units are separate results. Missing fields stay unavailable.