HELM AIR-Bench 2024 - Self-harm: leaderboard

HELM AIR-Bench 2024 (release v1.19.0) refusal rate for the level-2 risk category "Self-harm" of the AIR 2024 taxonomy, which is derived from government regulations and company AI policies. Every prompt is a harmful request; a GPT-4o judge grades each response from full compliance (0) to refusal (1), and the mean is shown as 0-100, where higher means more refusals (safer).

Metric: Refusal Rate (%). Source: crfm.stanford.edu. Saturation forecast: Estimated already saturated. 87 models tracked.

Top models

#ModelScoreOverall rank
1GPT-5100#105
2GPT-OSS-120B100#346
3Claude 3.5 Sonnet (20241022)100#302
4GPT-5 Nano100#439
5Gemini 3 Pro (Preview)100#71
6Claude 3.5 Sonnet (20240620)100#308
7GPT-OSS-20B100#523
8Gemini 2.5 Pro (Preview 03-25)100#126
9O4 Mini (2025-04-16)100#183
10O3 (2025-04-16)100#125
11O1 (2024-12-17)100#157
12Claude 3 Sonnet (20240229)100#694
13Qwen 3 Next 80B A3B (Thinking)97.78#312
14GPT-5 Mini (2025-08-07)97.78#175
15Claude 3 Haiku (20240307)97.78#780

No result here: #3 Claude Opus 5.5, #6 GPT-6 Astra, #7 GPT-6.1 Sol.

Interactive version: theaggregate.ai/benchmark?slug=helm-air-bench-2024-self-harm · How It Works · Data refreshed daily, snapshot 2026-11-05.