HarmBench
Benchmarks
Task NameDataset NameSOTA ResultTrendResults
HarmBench (test)
0.22N-gram Repetition Rate
16
HarmBench (test)
0ASR
15
HarmBench
76.6Win Rate
15
HarmBench Harm
0Thinking Collapse Rate
15
HarmBench
99.2ASP
14
Harmbench Standard
0ASR (Claude-Sonnet-4.5)
14
HarmBench Text Prompt
98.85F1 Score
14
Harmbench Malicious (full)
1.13Harmful Score
14
HarmBench
100Recall
14
HarmBench Transfer attack
58.7Average Success Rate
14
HarmBench standard behaviors
91ASR
13
HarmBench
81.8Crescendo Score
13
HarmBench n = 400
42Flagged Count
13
HarmBench Vicuna (test)
96Attack Success Rate (ASR)
12
HarmBench Llama-2 (test)
22Attack Success Rate (ASR)
12
HarmBench Risk 3: Harmful Reduction
0Attack Success Rate
12
HarmBench Static Context Evaluation Single-turn
70.5SFR
12
HarmBench
56.25DR
12
HarmBench (test)
100F1 Score
12
HarmBench
82.5Safety Rate
11
HarmBench
88Llama 3 8B ASR
11
HarmBench target: Phi-4-Mini
73ASR
11
HarmBench target: GLM4-9B
6.5ASR
11
HarmBench target: Qwen2.5-7B
3ASR
11
HarmBench target: Llama-3.2-3B
72.5ASR
11