Jailbreak StrongREJECT v2 (ASR)Browse 284 families
Jailbreak StrongREJECT v2 (ASR)
Can the model diagnose or complete difficult cybersecurity tasks?
Version / measure
- Domain
- Cybersecurity
- Ranked models
- 5
- Reported values
- 5
- Reports
- 1 · lab
- Direction
- Lower is better
- Status
- Version not specified
Rankings
Best reported score per model across effort settings
| # | Model | Best setting | Score |
|---|---|---|---|
| 1 | GPT-5.5OpenAI | xhighcost n/a1 value · Jul 9 · source | 0.5% |
| 2 | Muse Spark 1.1Meta | xhighcost n/a1 value · Jul 9 · source | 0.5% |
| 3 | Claude Opus 4.8Anthropic | maxcost n/a1 value · Jul 9 · source | 4.5% |
| 4 | Muse Spark 1.0Meta | reportedcost n/a1 value · Jul 9 · source | 25.2% |
| 5 | Gemini 3.1 ProGoogle | highcost n/a1 value · Jul 9 · source | 51.0% |
Effort curve
Score vs. reported cost. Lines connect complete sweeps only.
No cost-linked effort sweep for this version.
Definition and comparison boundarypublic methodology
Can the model diagnose or complete difficult cybersecurity tasks?
Security analysis or exploitation under a controlled evaluation environment. Lower is better. The source reports an attack success rate as a percentage.
Harness, tools, prompts, attempt count, and benchmark version can materially change the result. Compare within one reporting context.
Method / source ↗