HELM Audio - Voice Jailbreak Attacks: leaderboard
Metric: Refusal rate for safety. Source: crfm.stanford.edu. 17 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Gemini 2.5 Pro (Preview 05-06) | 53.33 |
| 2 | Gemini 1.5 Pro (001) | 51.11 |
| 3 | Gemini 1.5 Flash (001) | 31.67 |
| 4 | Gemini 2.0 Flash (Preview) | 31.11 |
| 5 | Gemini 2.0 Flash | 30.56 |
| 6 | Gemini 2.5 Flash (Preview 05-20) | 28.89 |
| 7 | Gemini 1.5 Flash (002) | 26.67 |
| 8 | Gemini 1.5 Pro (002) | 26.11 |
| 9 | Gemini 2.0 Flash Lite | 25 |
Interactive version: theaggregate.ai/benchmark?slug=helm-audio-voice-jailbreak-attacks · How It Works · Data refreshed daily, snapshot 2026-09-08.