X-Guard: Multilingual Guard Agent for Content Moderation
On the map: LLM agents and tool use → Agent threats, guardrails and governance
also in 1 more
Abstract (arXiv)
Large Language Models (LLMs) have rapidly become integral to numerous applications in critical domains where reliability is paramount. Despite significant advances in safety frameworks and guardrails, current protective measures exhibit crucial vulnerabilities, particularly in multilingual contexts. Existing safety systems remain susceptible to adversarial attacks in low-resource languages and through code-switching techniques, primarily due to their English-centric design. Furthermore, the development of effective multilingual guardrails is constrained by the scarcity of diverse cross-lingual training data. Even recent solutions like Llama Guard-3, while offering multilingual support, lack transparency in their decision-making processes. We address these challenges by introducing X-Guard agent, a transparent multilingual safety agent designed to provide content moderation across diverse linguistic contexts. X-Guard effectively defends against both conventional low-resource language attacks and sophisticated code-switching attacks. Our approach includes: curating and enhancing multiple open-source safety datasets with explicit evaluation rationales; employing a jury of judges methodology to mitigate individual judge LLM provider biases; creating a comprehensive multilingual safety dataset spanning 132 languages with 5 million data points; and developing a two-stage architecture combining a custom-finetuned mBART-50 translation module with an evaluation X-Guard 3B model trained through supervised finetuning and GRPO training. Our empirical evaluations demonstrate X-Guard's effectiveness in detecting unsafe content across multiple languages while maintaining transparency throughout the safety evaluation process. Our work represents a significant advancement in creating robust, transparent, and linguistically inclusive safety systems for LLMs and its integrated systems.
Key facts. Cited by 13 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 28 of its 55 references that are in the map. First posted on arXiv 11 Apr 2025.
Builds on
28 of 55 references.
Closest ancestors · 1
Same direction, newest first
Other references · 27
- 2022Training language models to follow instructions with human feedbackcited by 15,712
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 8,851
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2023Self-Refine: Iterative Refinement with Self-Feedbackcited by 3,317
- 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 460
- 2023Harnessing the Power of LLMs in Practice: A Survey on ChatGPT and Beyondcited by 409
- 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 401
- 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 347
- 2020Multilingual Translation with Extensible Multilingual Pretraining and Finetuningcited by 287
15 more
- 2024ShieldGemma: Generative AI Content Moderation Based on Gemmacited by 224
- 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 126
- 2024ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teamingcited by 96
- 2025GuardReasoner: Towards Reasoning-based LLM Safeguardscited by 89
- 2024RigorLLM: Resilient Guardrails for Large Language Models against Undesired Contentcited by 65
- 2024Universal Vulnerabilities in Large Language Models: Backdoor Attacks for In-context Learningcited by 47
- 2023Hijacking Large Language Models via Adversarial In-Context Learningcited by 41
- 2024R2-Guard: Robust Reasoning Enabled LLM Guardrail via Knowledge-Enhanced Logical Reasoningcited by 41
- 2025Reasoning-to-Defend: Safety-Aware Reasoning Can Defend Large Language Models from Jailbreakingcited by 34
- 2025ThinkGuard: Deliberative Slow Thinking Leads to Cautious Guardrailscited by 29
- 2024Llama Guard 3-1B-INT4: Compact and Efficient Safeguard for Human-AI Conversationscited by 24
- 2025BingoGuard: LLM Content Moderation Tools with Risk Levelscited by 20
- 2023TaCo: Enhancing Cross-Lingual Transfer for Low-Resource Languages in LLMs through Translation-Assisted Chain-of-Thought Processescited by 18
- 2024HarmAug: Effective Data Augmentation for Knowledge Distillation of Safety Guard Modelscited by 17
- 2024Benchmarking LLM Guardrails in Handling Multilingual Toxicitycited by 13
Built on by
Citing papers per year: 2025: 8; 2026: 5.
13 papers.
Sort:
By area:
- 2025Qwen3Guard Technical Reportcited by 125
- 2025Safety in Large Reasoning Models: A Surveycited by 58
- 2025A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Modelscited by 22
- 2025SoK: Evaluating Jailbreak Guardrails for Large Language Modelscited by 17
- 2025Safety Through Reasoning: An Empirical Study of Reasoning Guardrail Modelscited by 14
- 2025FanarGuard: A Culturally-Aware Moderation Filter for Arabic Language Modelscited by 5
- 2025CREST: Universal Safety Guardrails Through Cluster-Guided Cross-Lingual Transfercited by 2
- 2026Multi-turn Jailbreaking Attack in Multi-Modal Large Language Modelscited by 2
- 2026RvB: Automating AI System Hardening via Iterative Red-Blue Gamescited by 2
- 2026SEA-Guard: Culturally Grounded Multilingual Safeguard for Southeast Asiacited by 2
- 2026Challenges and Recommendations for LLM-as-a-Judge in Multilingual Settings and for Low-Resource Languagescited by 1
- 2025SEA-SafeguardBench: Evaluating AI Safety in SEA Languages and Culturescited by 0
1 more
- 2026Challenges and Recommendations for LLM-as-a-Judge in Multilingual Settings and for Low-Resource Languages2 Jul 2026
- 2026Boundary-targeted Membership Inference Attacks on Safety Classifiers21 May 2026
- 2026SEA-Guard: Culturally Grounded Multilingual Safeguard for Southeast Asia2 Feb 2026
- 2026RvB: Automating AI System Hardening via Iterative Red-Blue Games27 Jan 2026
- 2026Multi-turn Jailbreaking Attack in Multi-Modal Large Language Models8 Jan 2026
- 2025SEA-SafeguardBench: Evaluating AI Safety in SEA Languages and Cultures5 Dec 2025
- 2025CREST: Universal Safety Guardrails Through Cluster-Guided Cross-Lingual Transfer2 Dec 2025
- 2025FanarGuard: A Culturally-Aware Moderation Filter for Arabic Language Models24 Nov 2025
- 2025Qwen3Guard Technical Report16 Oct 2025
- 2025A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models4 Sep 2025
- 2025SoK: Evaluating Jailbreak Guardrails for Large Language Models12 Jun 2025
- 2025Safety Through Reasoning: An Empirical Study of Reasoning Guardrail Models26 May 2025
1 more
- 2025Safety in Large Reasoning Models: A Survey24 Apr 2025
- 2025Qwen3Guard Technical Reportcited by 125
- 2025CREST: Universal Safety Guardrails Through Cluster-Guided Cross-Lingual Transfercited by 2
- 2026Multi-turn Jailbreaking Attack in Multi-Modal Large Language Modelscited by 2
- 2026RvB: Automating AI System Hardening via Iterative Red-Blue Gamescited by 2
- 2025SEA-SafeguardBench: Evaluating AI Safety in SEA Languages and Culturescited by 0
- 2026Boundary-targeted Membership Inference Attacks on Safety Classifierscited by 0
- 2026Boundary-targeted Membership Inference Attacks on Safety Classifiers21 May 2026
- 2026RvB: Automating AI System Hardening via Iterative Red-Blue Games27 Jan 2026
- 2026Multi-turn Jailbreaking Attack in Multi-Modal Large Language Models8 Jan 2026
- 2025SEA-SafeguardBench: Evaluating AI Safety in SEA Languages and Cultures5 Dec 2025
- 2025CREST: Universal Safety Guardrails Through Cluster-Guided Cross-Lingual Transfer2 Dec 2025
- 2025Qwen3Guard Technical Report16 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2025MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safety
- 2023All Languages Matter: On the Multilingual Safety of Large Language Models
- 2025CultureGuard: Towards Culturally-Aware Dataset and Guard Model for Multilingual Safety Applications
- 2025SEALGuard: Safeguarding the Multilingual Conversations in Southeast Asian Languages for LLM Software Systems
- 2024The Language Barrier: Dissecting Safety Challenges of LLMs in Multilingual Contexts
- 2026Multilingual Safety Alignment Via Sparse Weight Editing
- 2026BabelSteering: Multilingual Safety Alignment via English Steering Vectors
- 2026CourtGuard: A Model-Agnostic Framework for Zero-Shot Policy Adaptation in LLM Safety