List your company

Jailbreak Attack on JailbreakBench (ASR, Harmful Score)

96Attack Success Rate (ASR)A-Salami
27.3645.186380.82Apr 13, 2026

Evaluation results

MethodLinks
A-SalamiTarget Model=Gemini 2.5 Pro2026.04969.52
A-SalamiTarget Model=Qwen 32026.04969.51
A-SalamiTarget Model=GLM-4.52026.04959.83
Salami AttackTarget Model=GLM-4.5, Shots=10-shot2026.04939.37
Salami AttackTarget Model=Deepseek V3, Shots=10-shot2026.04939.21
A-SalamiTarget Model=Deepseek V32026.04939.77
Salami AttackTarget Model=Qwen 3, Shots=10-shot2026.04939.38
Salami AttackTarget Model=Deepseek V3, Shots=5-shot2026.04928.63
A-SalamiTarget Model=GPT-4o2026.04919.35
Salami AttackTarget Model=Gemini 2.5 Pro, Shots=5-shot2026.04919.01
Salami AttackTarget Model=Gemini 2.5 Pro, Shots=10-shot2026.04919.03
Salami AttackTarget Model=Qwen 3, Shots=5-shot2026.04918.81
Salami AttackTarget Model=GLM-4.5, Shots=5-shot2026.04908.98
GOATTarget Model=GLM-4.52026.04888.22
Salami AttackTarget Model=GPT-4o, Shots=5-shot2026.04878.57
Salami AttackTarget Model=GPT-4o, Shots=10-shot2026.04878.67
GOATTarget Model=Deepseek V32026.04868
CrescendoTarget Model=GLM-4.52026.04787.68
CrescendoTarget Model=Qwen 32026.04787.6
GOATTarget Model=Qwen 32026.04767.64
CrescendoTarget Model=Deepseek V32026.04757.34
CFATarget Model=Deepseek V32026.04737.14
GOATTarget Model=GPT-4o2026.04727.03
CIATarget Model=Qwen 32026.04717.03
CrescendoTarget Model=GPT-4o2026.04646.55
CrescendoTarget Model=Gemini 2.5 Pro2026.04606.32
GOATTarget Model=Gemini 2.5 Pro2026.04586.19
CIATarget Model=Deepseek V32026.04585.41
CFATarget Model=Qwen 32026.04586.01
CIATarget Model=GLM-4.52026.04565.38
CIATarget Model=GPT-4o2026.04544.97
PAIRTarget Model=Qwen 32026.04545.64
CFATarget Model=GLM-4.52026.04474.88
CIATarget Model=Gemini 2.5 Pro2026.04475.35
CFATarget Model=Gemini 2.5 Pro2026.04404.2
CFATarget Model=GPT-4o2026.04383.88
PAIRTarget Model=Deepseek V32026.04384.73
PAIRTarget Model=GLM-4.52026.04353.75
PAIRTarget Model=Gemini 2.5 Pro2026.04343.82
PAIRTarget Model=GPT-4o2026.04303.4