List your company
ResearchFormerly WizWand

Jailbreak Attack on Jailbreak-Bench

100Attack Success RateX-Teaming
-4235077Apr 17, 2026
Updated 6mo ago

Evaluation results

MethodLinks
X-TeamingTarget Model=DeepSeek-V3.2, Model Access Category=Open-Weight Models, Attack Type=Multi-Turn Attacks2026.04100—
JARGONTarget Model=Claude-Sonnet-4.5, Model Access Category=Closed-Source Models, Attack Type=Multi-Turn Attacks2026.04100—
JARGONTarget Model=Claude-Opus-4.5, Model Access Category=Closed-Source Models, Attack Type=Multi-Turn Attacks2026.04100—
JARGONTarget Model=Gemini-3-Flash, Model Access Category=Closed-Source Models, Attack Type=Multi-Turn Attacks2026.04100—
JARGONTarget Model=DeepSeek-V3.2, Model Access Category=Open-Weight Models, Attack Type=Multi-Turn Attacks2026.04100—
JARGONTarget Model=Qwen3-235B-A22B-IT, Model Access Category=Open-Weight Models, Attack Type=Multi-Turn Attacks2026.04100—
JARGONTarget Model=LLaMA-4-Scout-IT, Model Access Category=Open-Weight Models, Attack Type=Multi-Turn Attacks2026.04100—
X-TeamingTarget Model=Qwen3-235B-A22B-IT, Model Access Category=Open-Weight Models, Attack Type=Multi-Turn Attacks2026.0499—
X-TeamingTarget Model=LLaMA-4-Scout-IT, Model Access Category=Open-Weight Models, Attack Type=Multi-Turn Attacks2026.0497—
FITDTarget Model=Gemini-3-Flash, Model Access Category=Closed-Source Models, Attack Type=Multi-Turn Attacks2026.0496—
FITDTarget Model=DeepSeek-V3.2, Model Access Category=Open-Weight Models, Attack Type=Multi-Turn Attacks2026.0495—
X-TeamingTarget Model=Gemini-3-Flash, Model Access Category=Closed-Source Models, Attack Type=Multi-Turn Attacks2026.0494—
JARGONTarget Model=GPT-5.2, Model Access Category=Closed-Source Models, Attack Type=Multi-Turn Attacks2026.0493—
CrescendoTarget Model=Gemini-3-Flash, Model Access Category=Closed-Source Models, Attack Type=Multi-Turn Attacks2026.0479—
AmpleGCGTarget Model=DeepSeek-V3.2, Model Access Category=Open-Weight Models, Attack Type=Single-Turn Attacks2026.0475—
CrescendoTarget Model=DeepSeek-V3.2, Model Access Category=Open-Weight Models, Attack Type=Multi-Turn Attacks2026.0473—
CrescendoTarget Model=LLaMA-4-Scout-IT, Model Access Category=Open-Weight Models, Attack Type=Multi-Turn Attacks2026.0473—
FITDTarget Model=Qwen3-235B-A22B-IT, Model Access Category=Open-Weight Models, Attack Type=Multi-Turn Attacks2026.0473—
PAIRTarget Model=DeepSeek-V3.2, Model Access Category=Open-Weight Models, Attack Type=Single-Turn Attacks2026.0468—
X-TeamingTarget Model=GPT-5.2, Model Access Category=Closed-Source Models, Attack Type=Multi-Turn Attacks2026.0459—
FITDTarget Model=GPT-5.2, Model Access Category=Closed-Source Models, Attack Type=Multi-Turn Attacks2026.0454—
CrescendoTarget Model=Qwen3-235B-A22B-IT, Model Access Category=Open-Weight Models, Attack Type=Multi-Turn Attacks2026.0452—
FITDTarget Model=LLaMA-4-Scout-IT, Model Access Category=Open-Weight Models, Attack Type=Multi-Turn Attacks2026.0449—
FITDTarget Model=Claude-Sonnet-4.5, Model Access Category=Closed-Source Models, Attack Type=Multi-Turn Attacks2026.0448—
PAIRTarget Model=LLaMA-4-Scout-IT, Model Access Category=Open-Weight Models, Attack Type=Single-Turn Attacks2026.0432—
AmpleGCGTarget Model=Gemini-3-Flash, Model Access Category=Closed-Source Models, Attack Type=Single-Turn Attacks2026.0427—
AmpleGCGTarget Model=LLaMA-4-Scout-IT, Model Access Category=Open-Weight Models, Attack Type=Single-Turn Attacks2026.0427—
PAIRTarget Model=Gemini-3-Flash, Model Access Category=Closed-Source Models, Attack Type=Single-Turn Attacks2026.0424—
FITDTarget Model=Claude-Opus-4.5, Model Access Category=Closed-Source Models, Attack Type=Multi-Turn Attacks2026.0424—
CrescendoTarget Model=Claude-Sonnet-4.5, Model Access Category=Closed-Source Models, Attack Type=Multi-Turn Attacks2026.0423—
AmpleGCGTarget Model=Qwen3-235B-A22B-IT, Model Access Category=Open-Weight Models, Attack Type=Single-Turn Attacks2026.0422—
CrescendoTarget Model=GPT-5.2, Model Access Category=Closed-Source Models, Attack Type=Multi-Turn Attacks2026.0422—
X-TeamingTarget Model=Claude-Opus-4.5, Model Access Category=Closed-Source Models, Attack Type=Multi-Turn Attacks2026.0422—
X-TeamingTarget Model=Claude-Sonnet-4.5, Model Access Category=Closed-Source Models, Attack Type=Multi-Turn Attacks2026.0418—
PAIRTarget Model=Qwen3-235B-A22B-IT, Model Access Category=Open-Weight Models, Attack Type=Single-Turn Attacks2026.0415—
CrescendoTarget Model=Claude-Opus-4.5, Model Access Category=Closed-Source Models, Attack Type=Multi-Turn Attacks2026.0411—
AmpleGCGTarget Model=GPT-5.2, Model Access Category=Closed-Source Models, Attack Type=Single-Turn Attacks2026.0410—
PAIRTarget Model=GPT-5.2, Model Access Category=Closed-Source Models, Attack Type=Single-Turn Attacks2026.045—
AmpleGCGTarget Model=Claude-Sonnet-4.5, Model Access Category=Closed-Source Models, Attack Type=Single-Turn Attacks2026.045—
PAIRTarget Model=Claude-Opus-4.5, Model Access Category=Closed-Source Models, Attack Type=Single-Turn Attacks2026.041—
AmpleGCGTarget Model=Claude-Opus-4.5, Model Access Category=Closed-Source Models, Attack Type=Single-Turn Attacks2026.041—
PAIRTarget Model=Claude-Sonnet-4.5, Model Access Category=Closed-Source Models, Attack Type=Single-Turn Attacks2026.040—
AmpleGCGTarget Model=Average, Model Access Category=N/A, Attack Type=Single-Turn Attacks2026.04—23.9
CrescendoTarget Model=Average, Model Access Category=N/A, Attack Type=Multi-Turn Attacks2026.04—47.6
FITDTarget Model=Average, Model Access Category=N/A, Attack Type=Multi-Turn Attacks2026.04—62.7
JARGONTarget Model=Average, Model Access Category=N/A, Attack Type=Multi-Turn Attacks2026.04—99
PAIRTarget Model=Average, Model Access Category=N/A, Attack Type=Single-Turn Attacks2026.04—20.7
X-TeamingTarget Model=Average, Model Access Category=N/A, Attack Type=Multi-Turn Attacks2026.04—69.9