WalledEval: A Comprehensive Safety Evaluation Toolkit for Large Language Models
Not on the map. Why?
Abstract (arXiv)
WalledEval is a comprehensive AI safety testing toolkit designed to evaluate large language models (LLMs). It accommodates a diverse range of models, including both open-weight and API-based ones, and features over 35 safety benchmarks covering areas such as multilingual safety, exaggerated safety, and prompt injections. The framework supports both LLM and judge benchmarking and incorporates custom mutators to test safety against various text-style mutations, such as future tense and paraphrasing. Additionally, WalledEval introduces WalledGuard, a new, small, and performant content moderation tool, and two datasets: SGXSTest and HIXSTest, which serve as benchmarks for assessing the exaggerated safety of LLMs and judges in cultural contexts. We make WalledEval publicly available at https://github.com/walledai/walledeval.
Key facts. Cited by 17 papers in the map (data through 14 Oct 2026). Builds on 21 of its 26 references that are in the map. First posted on arXiv 7 Aug 2024.
Builds on
21 of 26 references.
References · 21
- 2023GPT-4 Technical Reportcited by 18,396
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2023Qwen Technical Reportcited by 3,344
- 2023Universal and Transferable Adversarial Attacks on Aligned Language Modelscited by 3,104
- 2019HuggingFace's Transformers: State-of-the-art Natural Language Processingcited by 2,218
- 2024Gemma 2: Improving Open Language Models at a Practical Sizecited by 1,998
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
9 more
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,154
- 2021Datasets: A Community Library for Natural Language Processingcited by 530
- 2023A Wolf in Sheep's Clothing: Generalized Nested Jailbreak Prompts can Fool Large Language Models Easilycited by 259
- 2024Aya 23: Open Weight Releases to Further Multilingual Progresscited by 123
- 2024Language Models are Homer Simpson! Safety Re-Alignment of Fine-tuned Language Models through Task Arithmeticcited by 112
- 2024Does Refusal Training in LLMs Generalize to the Past Tense?cited by 79
- 2024The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harmcited by 70
- 2024Introducing v0.5 of the AI Safety Benchmark from MLCommonscited by 62
- 2024LionGuard: Building a Contextualized Moderation Classifier to Tackle Localized Unsafe Contentcited by 5
Built on by
Citing papers per year: 2024: 3; 2025: 10; 2026: 4.
17 papers.
Sort:
By area:
- 2024Survey of Cultural Awareness in Language Models: Text and Beyondcited by 103
- 2024Style Outweighs Substance: Failure Modes of LLM Judges in Alignment Benchmarkingcited by 35
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMscited by 26
- 2025o3-mini vs DeepSeek-R1: Which One is Safer?cited by 24
- 2025Early External Safety Testing of OpenAI's o3-mini: Insights from the Pre-Deployment Evaluationcited by 13
- 2026Falcon-H1R: Pushing the Reasoning Frontiers with a Hybrid Model for Efficient Test-Time Scalingcited by 13
- 2025On Jailbreaking Quantized Language Models Through Fault Injection Attackscited by 8
- 2025ASTRAL: Automated Safety Testing of Large Language Modelscited by 7
- 2024Boosting LLM Translation Skills without General Ability Loss via Rationale Distillationcited by 6
- 2025From ASR to ASP: Evaluating Prompt Attack Vulnerabilities Against Open-Source LLMscited by 6
- 2025EVOREFUSE: Evolutionary Prompt Optimization for Evaluation and Mitigation of LLM Over-Refusal to Pseudo-Malicious Instructionscited by 6
- 2025Quantifying CBRN Risk in Frontier Modelscited by 6
5 more
- 2026How Sensitive Are Safety Benchmarks to Judge Configuration Choices?cited by 5
- 2025Psychometric Personality Shaping Modulates Capabilities and Safety in Language Modelscited by 4
- 2026RedBench: A Universal Dataset for Comprehensive Red Teaming of Large Language Modelscited by 3
- 2025TRUSTVIS: A Multi-Dimensional Trustworthiness Evaluation Framework for Large Language Modelscited by 0
- 2026Localizing Safety Alignment: MLP Layers and Mid-Network Blocks Encode Refusal Behavior in Large Language Modelscited by 0
- 2026Localizing Safety Alignment: MLP Layers and Mid-Network Blocks Encode Refusal Behavior in Large Language Models12 Aug 2026
- 2026How Sensitive Are Safety Benchmarks to Judge Configuration Choices?27 Apr 2026
- 2026RedBench: A Universal Dataset for Comprehensive Red Teaming of Large Language Models7 Jan 2026
- 2026Falcon-H1R: Pushing the Reasoning Frontiers with a Hybrid Model for Efficient Test-Time Scaling5 Jan 2026
- 2025Quantifying CBRN Risk in Frontier Models24 Oct 2025
- 2025TRUSTVIS: A Multi-Dimensional Trustworthiness Evaluation Framework for Large Language Models15 Oct 2025
- 2025Psychometric Personality Shaping Modulates Capabilities and Safety in Language Models19 Sep 2025
- 2025On Jailbreaking Quantized Language Models Through Fault Injection Attacks4 Jul 2025
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs6 Jun 2025
- 2025EVOREFUSE: Evolutionary Prompt Optimization for Evaluation and Mitigation of LLM Over-Refusal to Pseudo-Malicious Instructions29 May 2025
- 2025From ASR to ASP: Evaluating Prompt Attack Vulnerabilities Against Open-Source LLMs20 May 2025
- 2025o3-mini vs DeepSeek-R1: Which One is Safer?30 Jan 2025
5 more
- 2025Early External Safety Testing of OpenAI's o3-mini: Insights from the Pre-Deployment Evaluation29 Jan 2025
- 2025ASTRAL: Automated Safety Testing of Large Language Models28 Jan 2025
- 2024Survey of Cultural Awareness in Language Models: Text and Beyond30 Oct 2024
- 2024Boosting LLM Translation Skills without General Ability Loss via Rationale Distillation17 Oct 2024
- 2024Style Outweighs Substance: Failure Modes of LLM Judges in Alignment Benchmarking23 Sep 2024
- 2024Style Outweighs Substance: Failure Modes of LLM Judges in Alignment Benchmarkingcited by 35
- 2025On Jailbreaking Quantized Language Models Through Fault Injection Attackscited by 8
- 2025EVOREFUSE: Evolutionary Prompt Optimization for Evaluation and Mitigation of LLM Over-Refusal to Pseudo-Malicious Instructionscited by 6
- 2026Localizing Safety Alignment: MLP Layers and Mid-Network Blocks Encode Refusal Behavior in Large Language Modelscited by 0
- 2026Localizing Safety Alignment: MLP Layers and Mid-Network Blocks Encode Refusal Behavior in Large Language Models12 Aug 2026
- 2025On Jailbreaking Quantized Language Models Through Fault Injection Attacks4 Jul 2025
- 2025EVOREFUSE: Evolutionary Prompt Optimization for Evaluation and Mitigation of LLM Over-Refusal to Pseudo-Malicious Instructions29 May 2025
- 2024Style Outweighs Substance: Failure Modes of LLM Judges in Alignment Benchmarking23 Sep 2024
- 2024Survey of Cultural Awareness in Language Models: Text and Beyondcited by 103
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMscited by 26
- 2025ASTRAL: Automated Safety Testing of Large Language Modelscited by 7
- 2024Boosting LLM Translation Skills without General Ability Loss via Rationale Distillationcited by 6
- 2025Quantifying CBRN Risk in Frontier Modelscited by 6
- 2026How Sensitive Are Safety Benchmarks to Judge Configuration Choices?cited by 5
- 2025Psychometric Personality Shaping Modulates Capabilities and Safety in Language Modelscited by 4
- 2025TRUSTVIS: A Multi-Dimensional Trustworthiness Evaluation Framework for Large Language Modelscited by 0
- 2026How Sensitive Are Safety Benchmarks to Judge Configuration Choices?27 Apr 2026
- 2025Quantifying CBRN Risk in Frontier Models24 Oct 2025
- 2025TRUSTVIS: A Multi-Dimensional Trustworthiness Evaluation Framework for Large Language Models15 Oct 2025
- 2025Psychometric Personality Shaping Modulates Capabilities and Safety in Language Models19 Sep 2025
- 2025The Scales of Justitia: A Comprehensive Survey on Safety Evaluation of LLMs6 Jun 2025
- 2025ASTRAL: Automated Safety Testing of Large Language Models28 Jan 2025
- 2024Survey of Cultural Awareness in Language Models: Text and Beyond30 Oct 2024
- 2024Boosting LLM Translation Skills without General Ability Loss via Rationale Distillation17 Oct 2024
Similar, not cited
Close in wording, no citation either way
- 2025SDEval: Safety Dynamic Evaluation for Multimodal Large Language Models
- 2024ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teaming
- 2024S-Eval: Towards Automated and Comprehensive Safety Evaluation for Large Language Models
- 2025SafeLawBench: Towards Safe Alignment of Large Language Models
- 2024SafetyPrompts: a Systematic Review of Open Datasets for Evaluating and Improving Large Language Model Safety
- 2024SafeBench: A Safety Evaluation Framework for Multimodal Large Language Models
- 2025CASE-Bench: Context-Aware SafEty Benchmark for Large Language Models
- 2024Benchmarking LLM Guardrails in Handling Multilingual Toxicity