Frontier AI Risk Monitor - SciKnowEval-BiologicalHarmfulQA - Red-Team Attacks: leaderboard

The same harmful biology questions wrapped in three FRT red-team attacks; the number is 100 minus the mean StrongREJECT harm score across the attacks.

Metric: Safety score (0-100, higher is safer). Source: airiskmonitor.net. 40 models tracked.

Top models

#ModelScoreOverall rank
1Claude Opus 5.597#5
2Claude Opus 4.6 (Thinking)96.67#102 (Claude Opus 4.6)
3Grok 4.795.33#44
4GPT-5.592.3#49
5Claude Opus 4.890.1#56
6GPT-6 Astra86.57#6
7GPT-5.6 Sol84.9#30
8Grok 4.383.03#333
9GPT-5.4 (High)73.47#123 (GPT-5.4)
10Qwen 3.7 Max70.3#145
11Gemini 3.8 Flash65.75#36
12Qwen 3.5 Plus (Thinking)57.17#232 (Qwen 3.5 Plus)
13GPT-5.1 (High)56.47#229 (GPT-5.1)
14Kimi K2.655#178
15Hy4 preview52.4#68

Interactive version: theaggregate.ai/benchmark?slug=frontier-ai-risk-monitor-sciknoweval-biologicalharmfulqa-red-team-attacks · How It Works · Data refreshed daily, snapshot 2026-11-13.