List your company
ResearchFormerly WizWand

Attack Success Rate (ASR) on JailbreakBench

0Attack Success Rate (ASR)Crescendo
-4235077Jun 21, 2026Jun 22, 2026Jun 24, 2026Jun 26, 2026Jun 27, 2026Jun 29, 2026Jul 1, 2026
Updated 4mo ago

Evaluation results

MethodLinks
Crescendotarget_llm=Claude-Sonnet-4.5, evaluation_judge=HarmBench-Llama-2-13b-cls2026.070
Odysseustarget_llm=Claude-Sonnet-4.5, evaluation_judge=HarmBench-Llama-2-13b-cls2026.070
ArtPrompttarget_llm=Claude-Sonnet-4.5, evaluation_judge=HarmBench-Llama-2-13b-cls2026.071
PAPILLONtarget_llm=Claude-Sonnet-4.5, evaluation_judge=HarmBench-Llama-2-13b-cls2026.072
JailbreakFunctiontarget_llm=Claude-Sonnet-4.5, evaluation_judge=HarmBench-Llama-2-13b-cls2026.074
GCGModel=Llama-3.1 8B, Config=100 steps, Time=15 min2026.065
ArtPrompttarget_llm=GPT-5.4, evaluation_judge=HarmBench-Llama-2-13b-cls2026.079
Do Anything Nowtarget_llm=Claude-Sonnet-4.5, evaluation_judge=HarmBench-Llama-2-13b-cls2026.079
PAPILLONtarget_llm=GPT-5.4, evaluation_judge=HarmBench-Llama-2-13b-cls2026.079
ArtPrompttarget_llm=Qwen3-Max, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0711
Crescendotarget_llm=GPT-5.4, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0713
Odysseustarget_llm=GPT-5.4, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0716
Do Anything Nowtarget_llm=GPT-4o, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0723
TVD-Singletarget_llm=Gemini-3-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0728
PAPILLONtarget_llm=Qwen3-Max, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0729
CC-BOStarget_llm=Claude-Sonnet-4.5, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0730
ArtPrompttarget_llm=Avg., evaluation_judge=HarmBench-Llama-2-13b-cls2026.0731.17
PAPILLONtarget_llm=Avg., evaluation_judge=HarmBench-Llama-2-13b-cls2026.0731.33
Odysseustarget_llm=Gemini-3-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0734
Crescendotarget_llm=Avg., evaluation_judge=HarmBench-Llama-2-13b-cls2026.0735.5
TVD-Singletarget_llm=GPT-4o, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0738
Odysseustarget_llm=GPT-4o, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0738
Odysseustarget_llm=Avg., evaluation_judge=HarmBench-Llama-2-13b-cls2026.0739
PAPILLONtarget_llm=Gemini-3-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0740
Do Anything Nowtarget_llm=GPT-5.4, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0742
CC-BOStarget_llm=GPT-5.4, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0742
Crescendotarget_llm=Gemini-3-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0743
CC-BOStarget_llm=Avg., evaluation_judge=HarmBench-Llama-2-13b-cls2026.0744.17
GCGModel=Qwen-2.5 7B, Config=100 steps, Time=15 min2026.0645
CC-BOStarget_llm=Qwen3-Max, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0745
Crescendotarget_llm=GPT-4o, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0746
CC-BOStarget_llm=GPT-4o, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0747
JailbreakFunctiontarget_llm=GPT-5.4, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0748
ArtPrompttarget_llm=GPT-4o, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0749
CC-BOStarget_llm=Gemini-3-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0749
PAPILLONtarget_llm=DeepSeek-V4-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0751
CC-BOStarget_llm=DeepSeek-V4-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0752
Do Anything Nowtarget_llm=Avg., evaluation_judge=HarmBench-Llama-2-13b-cls2026.0752.83
Crescendotarget_llm=DeepSeek-V4-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0753
ArtPrompttarget_llm=Gemini-3-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0754
PAPILLONtarget_llm=GPT-4o, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0757
Crescendotarget_llm=Qwen3-Max, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0758
Do Anything Nowtarget_llm=Gemini-3-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0761
ArtPrompttarget_llm=DeepSeek-V4-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0763
Odysseustarget_llm=DeepSeek-V4-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0764
TVD-Singletarget_llm=Avg., evaluation_judge=HarmBench-Llama-2-13b-cls2026.0770.83
JailbreakFunctiontarget_llm=Avg., evaluation_judge=HarmBench-Llama-2-13b-cls2026.0770.83
TVD-Singletarget_llm=GPT-5.4, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0773
CLSModel=Qwen-2.5 7B, Config=α = 2, Time=1 sec2026.0675
SMTtarget_llm=GPT-5.4, prompting_strategy=one-shot, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0777
Do Anything Nowtarget_llm=Qwen3-Max, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0782
Odysseustarget_llm=Qwen3-Max, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0782
SMTtarget_llm=Claude-Sonnet-4.5, prompting_strategy=one-shot, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0783
CLSModel=Llama-3.1 8B, Config=α = 2, Time=1 sec2026.0685
JailbreakFunctiontarget_llm=Gemini-3-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0786
TVD-Singletarget_llm=Claude-Sonnet-4.5, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0787
CLSModel=Qwen-2.5 7B, Config=α = 3, Time=1 sec2026.0690
SMTtarget_llm=Claude-Sonnet-4.5, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0792
SMTtarget_llm=Avg., prompting_strategy=one-shot, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0792.83
JailbreakFunctiontarget_llm=GPT-4o, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0793
CLSModel=Llama-3.1 8B, Config=α = 3, Time=1 sec2026.0695
JailbreakFunctiontarget_llm=Qwen3-Max, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0796
JailbreakFunctiontarget_llm=DeepSeek-V4-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0798
SMTtarget_llm=GPT-5.4, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0798
SMTtarget_llm=Avg., evaluation_judge=HarmBench-Llama-2-13b-cls2026.0798.33
TVD-Singletarget_llm=Qwen3-Max, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0799
SMTtarget_llm=GPT-4o, prompting_strategy=one-shot, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0799
SMTtarget_llm=Qwen3-Max, prompting_strategy=one-shot, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0799
SMTtarget_llm=DeepSeek-V4-Flash, prompting_strategy=one-shot, evaluation_judge=HarmBench-Llama-2-13b-cls2026.0799
Do Anything Nowtarget_llm=DeepSeek-V4-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.07100
TVD-Singletarget_llm=DeepSeek-V4-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.07100
SMTtarget_llm=Gemini-3-Flash, prompting_strategy=one-shot, evaluation_judge=HarmBench-Llama-2-13b-cls2026.07100
SMTtarget_llm=GPT-4o, evaluation_judge=HarmBench-Llama-2-13b-cls2026.07100
SMTtarget_llm=Qwen3-Max, evaluation_judge=HarmBench-Llama-2-13b-cls2026.07100
SMTtarget_llm=Gemini-3-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.07100
SMTtarget_llm=DeepSeek-V4-Flash, evaluation_judge=HarmBench-Llama-2-13b-cls2026.07100