Prompt Injection Defense on 13 prompt injection benchmarks average (test)
74Utility AccuracyNo Defense
Evaluation results
| Method | Links | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| No DefenseDefense Type=—, Backend LLM=Qwen3-4B-Instruct-25072026.03 | 74 | 63 | 85 | 68 | 68 | 99 | 100 | 92 | |
| SandwichDefense Type=Prevention, Backend LLM=Qwen3-4B-Instruct-25072026.03 | 74 | 56 | 76 | 61 | 62 | 97 | 99 | 91 | |
| PromptArmorDefense Type=Prevention, Backend LLM=Qwen3-4B-Instruct-25072026.03 | 74 | 50 | 58 | 61 | 63 | 92 | 100 | 92 | |
| InstructionalDefense Type=Prevention, Backend LLM=Qwen3-4B-Instruct-25072026.03 | 73 | 61 | 83 | 65 | 67 | 98 | 99 | 92 | |
| PIGuardDefense Type=Filter, Backend LLM=Qwen3-4B-Instruct-25072026.03 | 72 | 27 | 22 | 37 | 38 | 79 | 92 | 82 | |
| PromptGuardDefense Type=Filter, Backend LLM=Qwen3-4B-Instruct-25072026.03 | 66 | 30 | 25 | 46 | 50 | 92 | 96 | 89 | |
| DataFilterDefense Type=Prevention, Backend LLM=Qwen3-4B-Instruct-25072026.03 | 63 | 37 | 22 | 43 | 47 | 58 | 71 | 49 | |
| DataSentinelDefense Type=Filter, Backend LLM=Qwen3-4B-Instruct-25072026.03 | 55 | 26 | 12 | 40 | 43 | 45 | 63 | 52 |