Agent Red Teaming k=100 (CAIS)
Safety · 2025-07-28
Agent Red Teaming (ART) measures adversarial robustness of AI agents against malicious use and prompt-injection attacks. SAFE reports the probability that an attacker finds a successful attack after k=100 attempts, so lower is better.
Top models (lower is better)
| Model | Score |
|---|---|
| Gemini 4 Argon | 10.2 |
| GPT-6 Astra | 13.5 |
| GPT-6.1 Sol | 18.8 |
| Claude Opus 5.5 | 24.4 |
| Gemini 3.8 Flash | 29.8 |
| Claude Fable 5.1 | 34.2 |
| Gemini 3.7 Flash | 38.5 |
| Claude Fable 5 | 39.4 |
| GPT-5.6 Sol | 40.3 |
| GPT-5.5 | 41.5 |
| Opus 4.5 | 42.5 |
| Claude Opus 5 | 43.3 |
| Opus 4.7 | 44.5 |
| Muse Spark 1.1 | 44.8 |
| Gemini 3.1 Flash-Lite Preview | 45.4 |
| Opus 4.8 | 47.0 |
| Grok 4.6 | 47.1 |
| Gemini 3 Pro Preview | 47.5 |
| Muse Spark Open | 48.8 |
| Opus 4.6 | 49.5 |
| GPT-5.6 Terra | 54.6 |
| Sonnet 4.6 | 54.8 |
| GPT-5.4 | 59.7 |
| GPT-5.6 Luna | 64.2 |
| Sonnet 4.5 | 64.6 |
| Gemini 3.1 Pro Preview | 68.0 |
| GPT-5.2 | 68.8 |
| GLM-5.3 | 69.2 |
| Haiku 4.5 | 69.7 |
| GLM-5.2 | 71.0 |
| Gemini 3.5 Flash | 72.3 |
| GPT-5.4 Mini | 74.3 |
| GLM-5.1 | 75.8 |
| Kimi K3 | 76.6 |
| GPT-5.4 Nano | 81.7 |
| GPT-5.1 | 82.1 |
| Grok 4.5 | 83.5 |
| GPT-5 Mini | 84.3 |
| Grok 4.20 | 84.6 |
| Grok 4 | 85.9 |