# Jailbreak Safety on WildJailbreak Source: [Jailbreak Safety on WildJailbreak]() Collection index: [llms.txt]() Data updated: 2026-03-04T08:24:07.294Z Evaluation of model safety performance against jailbreak prompts using the WildJailbreak dataset, measured by Reasoning Safety and Response Safety. A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. | Scope | Recorded value | | --- | --- | | Task | Jailbreak Safety | | Dataset (including any stated split) | WildJailbreak | | Metric | Reasoning Harmful Ratio | | Unit | PERCENT | | Direction | Lower is better | | Results loaded | 23 of 23 | | Coverage | All results currently returned for this benchmark | Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol. ## Metrics - [Reasoning Harmful Ratio](): Lower is better; unit: PERCENT. - [Reasoning Safety](): Higher is better; unit: PERCENT. - [Response Safety](): Higher is better; unit: PERCENT. - [Response Harmful Ratio](): Lower is better; unit: PERCENT. ## Recorded results | Method | Reasoning Harmful Ratio | Result date | Report paper | | --- | --- | --- | --- | | IPO | 17.3 | Not recorded | 68fa7bb71e209131cea8a1c0 | | IPO | 23.4 | Not recorded | 68fa7bb71e209131cea8a1c0 | | IPO | 23.6 | Not recorded | 68fa7bb71e209131cea8a1c0 | | GRPO | 36.3 | Not recorded | 68fa7bb71e209131cea8a1c0 | | STAR | 37.8 | Not recorded | 68fa7bb71e209131cea8a1c0 | | STAR | 43.2 | Not recorded | 68fa7bb71e209131cea8a1c0 | | GRPO | 45 | Not recorded | 68fa7bb71e209131cea8a1c0 | | GRPO | 46 | Not recorded | 68fa7bb71e209131cea8a1c0 | | SafeKey | 46.6 | Not recorded | 68fa7bb71e209131cea8a1c0 | | RealSafe | 47.1 | Not recorded | 68fa7bb71e209131cea8a1c0 | | SafeKey | 49.9 | Not recorded | 68fa7bb71e209131cea8a1c0 | | RealSafe | 54.6 | Not recorded | 68fa7bb71e209131cea8a1c0 | | SafeChain | 66.7 | Not recorded | 68fa7bb71e209131cea8a1c0 | | SafeChain | 68.3 | Not recorded | 68fa7bb71e209131cea8a1c0 | | Base | 80 | Not recorded | 68fa7bb71e209131cea8a1c0 | | Base | 82.3 | Not recorded | 68fa7bb71e209131cea8a1c0 | | Base | 82.4 | Not recorded | 68fa7bb71e209131cea8a1c0 | ### IPO Reasoning Harmful Ratio: 17.3. Result ID: 69a7eafb6dbb7075b94cb301. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"Qwen3-8B"}. This record does not assert independent reproduction. ### IPO Reasoning Harmful Ratio: 23.4. Result ID: 69a7eafb6dbb7075b94cb2f7. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"DeepSeek-R1-Distill-Llama-8B"}. This record does not assert independent reproduction. ### IPO Reasoning Harmful Ratio: 23.6. Result ID: 69a7eafb6dbb7075b94cb2fe. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"DeepSeek-R1-Distill-Qwen-7B"}. This record does not assert independent reproduction. ### GRPO Reasoning Harmful Ratio: 36.3. Result ID: 69a7eafb6dbb7075b94cb2f6. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Backbone":"DeepSeek-R1-Distill-Llama-8B"}. This record does not assert independent reproduction. ### STAR Reasoning Harmful Ratio: 37.8. Result ID: 69a7eafb6dbb7075b94cb2f4. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"DeepSeek-R1-Distill-Llama-8B"}. This record does not assert independent reproduction. ### STAR Reasoning Harmful Ratio: 43.2. Result ID: 69a7eafb6dbb7075b94cb2fb. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"DeepSeek-R1-Distill-Qwen-7B"}. This record does not assert independent reproduction. ### GRPO Reasoning Harmful Ratio: 45. Result ID: 69a7eafb6dbb7075b94cb300. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Backbone":"Qwen3-8B"}. This record does not assert independent reproduction. ### GRPO Reasoning Harmful Ratio: 46. Result ID: 69a7eafb6dbb7075b94cb2fd. [Reporting paper]() [Method origin paper]() [Implementation]() Recorded evaluation configuration: {"Backbone":"DeepSeek-R1-Distill-Qwen-7B"}. This record does not assert independent reproduction. ### SafeKey Reasoning Harmful Ratio: 46.6. Result ID: 69a7eafb6dbb7075b94cb2fc. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"DeepSeek-R1-Distill-Qwen-7B"}. This record does not assert independent reproduction. ### RealSafe Reasoning Harmful Ratio: 47.1. Result ID: 69a7eafb6dbb7075b94cb2f3. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"DeepSeek-R1-Distill-Llama-8B"}. This record does not assert independent reproduction. ### SafeKey Reasoning Harmful Ratio: 49.9. Result ID: 69a7eafb6dbb7075b94cb2f5. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"DeepSeek-R1-Distill-Llama-8B"}. This record does not assert independent reproduction. ### RealSafe Reasoning Harmful Ratio: 54.6. Result ID: 69a7eafb6dbb7075b94cb2fa. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"DeepSeek-R1-Distill-Qwen-7B"}. This record does not assert independent reproduction. ### SafeChain Reasoning Harmful Ratio: 66.7. Result ID: 69a7eafb6dbb7075b94cb2f2. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"DeepSeek-R1-Distill-Llama-8B"}. This record does not assert independent reproduction. ### SafeChain Reasoning Harmful Ratio: 68.3. Result ID: 69a7eafb6dbb7075b94cb2f9. [Reporting paper]() [Method origin paper]() Recorded evaluation configuration: {"Backbone":"DeepSeek-R1-Distill-Qwen-7B"}. This record does not assert independent reproduction. ### Base Reasoning Harmful Ratio: 80. Result ID: 69a7eafb6dbb7075b94cb2ff. [Reporting paper]() Recorded evaluation configuration: {"Backbone":"Qwen3-8B"}. This record does not assert independent reproduction. ### Base Reasoning Harmful Ratio: 82.3. Result ID: 69a7eafb6dbb7075b94cb2f8. [Reporting paper]() Recorded evaluation configuration: {"Backbone":"DeepSeek-R1-Distill-Qwen-7B"}. This record does not assert independent reproduction. ### Base Reasoning Harmful Ratio: 82.4. Result ID: 69a7eafb6dbb7075b94cb2f1. [Reporting paper]() Recorded evaluation configuration: {"Backbone":"DeepSeek-R1-Distill-Llama-8B"}. This record does not assert independent reproduction. Page 1 of 1. This is an index page, not the full collection.