Categories Companies Research

Loading the SOTA2 catalog…

Explore

Categories Companies Research

Contribute

Join SOTA2 Contact

SOTA2

© 2026 SOTA2

Build in Bellevue, USA

WizWand is now SOTA2 Research

Papers Benchmarks Datasets Tasks

Jailbreak Defense research benchmarks – Page 3 · SOTA2 Research

Jailbreak Defense

Benchmarks

Dataset NameSOTA MethodSort

Dataset NameSOTA methodMetricTrendResultsLast Updated

6.55Attack Success Rate (ASR)

14

Mar 31, 2026

MIX-JAIL AdvB-Short

4.44ASR

14

Feb 26, 2026

Decoding MaliciousInstruct

1ASR

14

Feb 26, 2026

9.83ASR

14

Feb 26, 2026

0.24ASR

14

Feb 26, 2026

0Attack Success Rate (ASR)

14

Feb 26, 2026

1Harmful Score

14

Feb 26, 2026

Common Jailbreak Attacks Suite (Manual (IJP), GCG, AutoDAN, DrAttack, MultiJail, ActorAttack) on Qwen3.5-9B (test)

Qwen3.5-9B (No Defense)

0IJP ASR (Manual)

13

Apr 3, 2026

0ASR

13

Apr 3, 2026

0ASR

13

Apr 3, 2026

0ASR

13

Apr 3, 2026

JailbreakBench Qwen-2.5-7B

0ASR

12

Feb 26, 2026

0FPR

12

Feb 26, 2026

0FPR

12

Feb 26, 2026

JailbreakBench (JBB)

36.11FNR

12

Feb 26, 2026

new-HA (unblocked)

0FNR

12

Feb 26, 2026

Jailbreak Defense Evaluation ReNeLLM, EquaCode, DeepInc, WordGame

4.02ASR (ReNeLLM)

11

Jun 15, 2026

GuardReasoner-1B

14.65ASR

11

Jun 15, 2026

10.24ASR

11

Jun 15, 2026

2.31ASR

11

Jun 15, 2026

0Attack Success Rate (ASR)

11

Apr 3, 2026

Average Aggregate of 6 Attacks

0Attack Success Rate (ASR)

11

Apr 3, 2026

69Reference Performance

10

Jun 5, 2026

Jailbreak Attacks

28.1ES ASR

10

Apr 14, 2026

Attack Success Rate (ASR) Benchmarks

Goal Prioritization w/o thoughts

2.5SR

10

Feb 26, 2026

Page 3 of 5

Popular datasets

AdvBench JailbreakBench Emoji Attack GCG AutoDAN

Follow for updates

Join SOTA2 Contact