ML-Bench (Multilingual Safety) - Refined Query F1: leaderboard
Safe or unsafe classification of refined queries that wrap a policy violation in a professional or bureaucratic request, by a guardrail model given only the input text. ML-Bench (Zhao et al., 2026) is a multilingual guardrail benchmark built from 17 regional AI regulations in 14 languages. F1 on the unsafe class, in percent; higher is better.
Metric: Unsafe-query F1 (%; safe/unsafe classification of refined queries that embed policy violations in professional or bureaucratic requests, 14 languages, guardrail given only the input text). Source: arxiv.org. Saturation forecast: Rough model projection: around 2026. 12 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | ML-Guard-7B | 88 | |
| 2 | ML-Guard-1.5B | 70 | |
| 3 | Llama-Guard-3-1B | 47 | |
| 4 | PolyGuard-Qwen | 34 | |
| 5 | DuoGuard-1.5B-transfer | 32 | |
| 6 | Llama-Guard-4-12B | 27 | |
| 7 | Llama-3.1-Nemotron-Safety-Guard-8B-v3 | 23 | |
| 8 | Qwen3Guard-Gen-0.6B | 9 | |
| 9 | Qwen3Guard-Gen-8B | 8 | |
| 10 | Llama-Guard-3-8B | 6 |
Interactive version: theaggregate.ai/benchmark?slug=ml-bench-multilingual-safety-refined-query-f1 · How It Works · Data refreshed daily, snapshot 2026-11-12.