RedBench - HarmBench ASR (Zero-Shot Attacker): leaderboard
Metric: Attack Success Rate (%; HarmBench test behaviors, Llama-Guard-3-8B judge; zero-shot attacker-LLM test cases). Source: arxiv.org. Saturation forecast: Estimated already saturated. 6 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | GPT-4.1 Nano | 0.63 |
| 2 | GPT-4o Mini | 16.56 |
| 3 | Qwen 2.5 7B Instruct | 41.88 |
| 4 | Llama 3.1 8B Instruct | 55 |
| 5 | Gemma 2 9B (IT) | 70.31 |
| 6 | Ministral-8B-Instruct-2410 | 81.88 |
Interactive version: theaggregate.ai/benchmark?slug=redbench-harmbench-asr-zero-shot-attacker · How It Works · Data refreshed daily, snapshot 2026-09-25.