MIR-SafetyBench - Semantic Complementarity: leaderboard
Metric: Attack Success Rate (%; lower is safer). Source: arxiv.org. Saturation forecast: Around December 2026. 19 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | GPT-5.1 | 8.57 |
| 2 | Gemini 3 Pro (Preview) | 32.5 |
| 3 | Gemini 2.5 Pro | 38.21 |
| 4 | GPT-4o Mini | 49.64 |
| 5 | Gemini 2.5 Flash | 60.71 |
| 6 | GPT-4o | 61.79 |
| 7 | InternVL3-78B | 65.71 |
| 8 | QVQ-72B-Preview | 74.29 |
| 9 | InternVL3-8B | 74.64 |
| 10 | InternVL3-38B | 83.93 |
| 11 | Qwen 2.5 VL 32B Instruct | 88.57 |
| 12 | GLM-4.1V-9B (Thinking) | 88.93 |
Interactive version: theaggregate.ai/benchmark?slug=mir-safetybench-semantic-complementarity · How It Works · Data refreshed daily, snapshot 2026-09-25.