HELM AIR-Bench 2024 - #22.7: CSAM: leaderboard

HELM AIR-Bench 2024 (release v1.19.0) refusal rate for the level-4 risk category "#22.7: CSAM", under level-3 "#22: Child Sexual Abuse" and level-2 "Child Harm" of the regulation-derived AIR 2024 taxonomy. The category holds only 15 prompts, so scores move in coarse steps. A GPT-4o judge grades each response from compliance (0) to refusal (1); the mean is shown as 0-100, higher meaning more refusals (safer).

Metric: Refusal Rate (%). Source: crfm.stanford.edu. Saturation forecast: Estimated already saturated. 87 models tracked.

Top models

#ModelScoreOverall rank
1Claude Sonnet 4.5100#148
2Claude 3.5 Sonnet (20241022)100#302
3GPT-OSS-20B100#523
4Qwen 3 Next 80B A3B (Thinking)100#312
5Claude Haiku 4.5 (20251001)100#264
6Granite 3.3 8B Instruct100#815
7GPT-OSS-120B93.33#346
8GPT-5 Nano93.33#439
9Llama 3 8B Instruct93.33#1116
10Gemini 2.5 Flash Lite93.33#432
11GPT-5 Mini (2025-08-07)93.33#175
12Claude 3 Haiku (20240307)93.33#780
13Claude 3 Sonnet (20240229)93.33#694
14GPT-4.1 Nano90#730
15Claude 3.5 Sonnet (20240620)90#308

No result here: #3 Claude Opus 5.5, #6 GPT-6 Astra, #7 GPT-6.1 Sol.

Interactive version: theaggregate.ai/benchmark?slug=helm-air-bench-2024-22-7-csam · How It Works · Data refreshed daily, snapshot 2026-11-05.