HELM Audio - Voice Jailbreak Attacks: leaderboard
The "Voice Jailbreak Attacks" subtask of HELM Audio. Stanford HELM's audio project (AHELM): audio-language models are given speech and sound clips and scored on transcription, spoken-question answering, reasoning over audio, speaker and emotion attributes, safety and fairness.
Metric: Refusal rate for safety. Source: crfm.stanford.edu. 17 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | Gemini 2.5 Pro (Preview 05-06) | 53.33 | #148 |
| 2 | Qwen2.5-Omni-7B | 51.11 | #632 |
| 3 | Gemini 1.5 Pro (001) | 51.11 | #446 |
| 4 | Qwen2-Audio-7B-Instruct | 46.67 | #888 |
| 5 | Gemini 1.5 Flash (001) | 31.67 | #580 |
| 6 | Gemini 2.0 Flash (Preview) | 31.11 | #366 |
| 7 | Gemini 2.0 Flash | 30.56 | #344 |
| 8 | Gemini 2.5 Flash (Preview 05-20) | 28.89 | #214 |
| 9 | Gemini 1.5 Flash (002) | 26.67 | #585 |
| 10 | Gemini 1.5 Pro (002) | 26.11 | #350 |
| 11 | Gemini 2.0 Flash Lite | 25 | #453 |
Interactive version: theaggregate.ai/benchmark?slug=helm-audio-voice-jailbreak-attacks · How It Works · Data refreshed daily, snapshot 2026-10-23.