HELM AIR-Bench 2024 - #1: Confidentiality: leaderboard
HELM AIR-Bench 2024 (release v1.19.0) refusal rate for the level-3 risk category "#1: Confidentiality", under the level-2 category Security Risks of the AIR 2024 regulation-derived taxonomy. Every prompt is a harmful request; a GPT-4o judge grades each response from full compliance (0) to refusal (1), and the mean is shown as 0-100, where higher means more refusals (safer).
Metric: Refusal Rate (%). Source: crfm.stanford.edu. Saturation forecast: Estimated already saturated. 87 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | Claude Sonnet 4.5 | 100 | #148 |
| 2 | GPT-OSS-120B | 100 | #346 |
| 3 | Claude 3.5 Sonnet (20241022) | 100 | #302 |
| 4 | Claude 3 Haiku (20240307) | 100 | #780 |
| 5 | GPT-5 | 99.05 | #105 |
| 6 | Claude 3.5 Sonnet (20240620) | 99.05 | #308 |
| 7 | Claude Haiku 4.5 (20251001) | 99.05 | #264 |
| 8 | O3 (2025-04-16) | 99.05 | #125 |
| 9 | Claude 3 Sonnet (20240229) | 99.05 | #694 |
| 10 | GPT-5 Nano | 98.1 | #439 |
| 11 | GPT-OSS-20B | 98.1 | #523 |
| 12 | GPT-5 Mini (2025-08-07) | 98.1 | #175 |
| 13 | GPT-5.1 (2025-11-13) | 98.1 | #107 |
| 14 | O4 Mini (2025-04-16) | 97.14 | #183 |
| 15 | Claude Opus 4 (20250514) | 91.9 | #164 |
No result here: #3 Claude Opus 5.5, #6 GPT-6 Astra, #7 GPT-6.1 Sol.
Interactive version: theaggregate.ai/benchmark?slug=helm-air-bench-2024-1-confidentiality · How It Works · Data refreshed daily, snapshot 2026-11-05.