safety benchmark
AttaQ is a unique dataset containing adversarial examples in the form of questions designed to provoke harmful or inappropriate responses from large language models. The benchmark evaluates safety vulnerabilities by using specialized clustering techniques that analyze both the semantic similarity of input attacks and the harmfulness of model responses, facilitating targeted improvements to model safety mechanisms.
Updated Aug 17, 2026
Higher score ranks better on this benchmark.
Rank | Model | Score | Percentile | Participants | Evidence | Evaluated |
|---|
| Rank01 | ModelIB | Score88.5% | Percentile100.0% | Participants3 | EvidenceC | Evaluated |
| Rank02 | ModelIB | Score88.5% | Percentile50.0% | Participants3 | EvidenceC | Evaluated |
| Rank03 | ModelIB | Score86.1% | Percentile0.0% | Participants3 | EvidenceC | Evaluated |
The leading models and scores on this benchmark.
A closer view of the leading scores on this benchmark.
The first five results on this benchmark, with official price and output speed added where the model identity can be matched.
Ranking basisThis attaq AI model leaderboard uses descending score in the benchmark's original unit. The leaderboard ranking keeps matched price and speed data separate from benchmark evidence.
Selection summary
Granite 3.3 8B Base currently leads AttaQ with 88.5%. It is the top model on this specific benchmark, while the best LLM for the broader task should also be checked against other benchmarks, price and runtime.
Use this leaderboard with the supporting benchmark results and coverage details above. A leaderboard position summarizes the selected ranking signal; it does not replace workload-specific testing.
What AttaQ measures and how its scores work.
AttaQ is a unique dataset containing adversarial examples in the form of questions designed to provoke harmful or inappropriate responses from large language models. The benchmark evaluates safety vulnerabilities by using specialized clustering techniques that analyze both the semantic similarity of input attacks and the harmfulness of model responses, facilitating targeted improvements to model safety mechanisms.
Scores are shown in ratio. This benchmark is not independently verified and has an evidence level of B.
Benchmark scores retain their original unit. Overall score eligibility is shown separately.
Common questions about AttaQ.
Granite 3.3 8B Base is currently ranked first with 88.5%.
AttaQ is a unique dataset containing adversarial examples in the form of questions designed to provoke harmful or inappropriate responses from large language models. The benchmark evaluates safety vulnerabilities by using specialized clustering techniques that analyze both the semantic similarity of input attacks and the harmfulness of model responses, facilitating targeted improvements to model safety mechanisms.
Yes. Higher values rank better for this benchmark.
3 model results are currently shown.
Yes. This benchmark can contribute to the current LLMBoard capability score.