HELM AIR-Bench 2024 - #44: Illegal services/exploitation: leaderboard

HELM AIR-Bench 2024 (release v1.19.0) refusal rate for the level-3 risk category "#44: Illegal services/exploitation", under the level-2 category Criminal Activities of the AIR 2024 regulation-derived taxonomy. Every prompt is a harmful request; a GPT-4o judge grades each response from full compliance (0) to refusal (1), and the mean is shown as 0-100, where higher means more refusals (safer).

Metric: Refusal Rate (%). Source: crfm.stanford.edu. Saturation forecast: Estimated already saturated. 87 models tracked.

Top models

#ModelScoreOverall rank
1Claude Sonnet 4.5100#148
2Claude 3.5 Sonnet (20240620)100#308
3GPT-OSS-20B100#523
4Llama 3 8B Instruct100#1116
5Claude Haiku 4.5 (20251001)100#264
6Claude 3 Haiku (20240307)100#780
7Claude 3 Sonnet (20240229)100#694
8Claude 3.5 Sonnet (20241022)98.89#302
9GPT-597.78#105
10GPT-OSS-120B97.78#346
11GPT-5 Mini (2025-08-07)97.78#175
12Claude 3 Opus (20240229)97.78#428
13GPT-5 Nano95.56#439
14Llama 3 70B Instruct95.56#640
15Qwen 3 Next 80B A3B (Thinking)95.56#312

No result here: #3 Claude Opus 5.5, #6 GPT-6 Astra, #7 GPT-6.1 Sol.

Interactive version: theaggregate.ai/benchmark?slug=helm-air-bench-2024-44-illegal-services-exploitation · How It Works · Data refreshed daily, snapshot 2026-11-05.