MME-Safety - Refusal Rate: leaderboard
Metric: Refusal rate (%; share of final answers to 3,801 manually verified image-text pairs with harmful intent across nine risk categories and nine image/text stealth combinations, zero-shot; GPT-4o judge that the response explicitly refuses). Source: arxiv.org. Saturation forecast: Around April 2028. 17 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Qwen 3 VL 235B A22B Instruct | 77.95 |
| 2 | Claude Sonnet 4 (Thinking) | 75.86 |
| 3 | Claude 3.7 Sonnet | 75.76 |
| 4 | O4 Mini | 71.91 |
| 5 | Claude 3.7 Sonnet (Thinking) | 71.89 |
| 6 | Qwen 3 VL 235B A22B (Thinking) | 71.01 |
| 7 | Qwen 3 VL 32B (Thinking) | 70.14 |
| 8 | Gemini 3 Pro | 64.13 |
| 9 | Qwen 3 VL 8B (Thinking) | 63.56 |
Interactive version: theaggregate.ai/benchmark?slug=mme-safety-refusal-rate · How It Works · Data refreshed daily, snapshot 2026-09-26.