M-ALERT - English: leaderboard

The model answers 15k red-teaming prompts in the original English ALERT prompts across 32 risk categories; the score is the share LlamaGuard-3 labels safe. The English set equals the original ALERT benchmark, re-run here on newer models.

Metric: Safe responses on the English prompts (%, 15k prompts, LlamaGuard-3 judge, higher is better). Source: arxiv.org. 39 models tracked.

Top models

#ModelScoreOverall rank
1Gemma 2 2B (IT)98.89#6876
2Gemma 2 9B (IT)98.87#2262
3Gemma 2 27B (IT)98.87#1782
4Gemini 2.0 Flash (001)98.02#727
5Qwen 2.5 14B Instruct97.82#1732
6Llama 3 8B Instruct97.77#4612
7GPT-4o (2024-11-20)97.76#866
8QwQ-32B97.63#910
9Llama 3.1 8B Instruct97.24#4246
10Qwen 2.5 1.5B Instruct97.19#7470
11Qwen 2.5 32B Instruct96.77#1215
12Qwen 2.5 72B Instruct96.72#1092
13EuroLLM-9B-Instruct96.69#3589
14Qwen 2.5 3B Instruct96.63#5150
15Llama 3.2 1B Instruct96.29#9047

Interactive version: theaggregate.ai/benchmark?slug=m-alert-english · How It Works · Data refreshed daily, snapshot 2026-11-13.