mlsanityData to 7 Oct 2026

X-Guard: Multilingual Guard Agent for Content Moderation

arXiv 2504.08848 ↗First posted 11 Apr 2025cs.CR cs.AIcited by 13

On the map: LLM agents and tool use → Agent threats, guardrails and governance

also in 1 more
Abstract (arXiv)

Large Language Models (LLMs) have rapidly become integral to numerous applications in critical domains where reliability is paramount. Despite significant advances in safety frameworks and guardrails, current protective measures exhibit crucial vulnerabilities, particularly in multilingual contexts. Existing safety systems remain susceptible to adversarial attacks in low-resource languages and through code-switching techniques, primarily due to their English-centric design. Furthermore, the development of effective multilingual guardrails is constrained by the scarcity of diverse cross-lingual training data. Even recent solutions like Llama Guard-3, while offering multilingual support, lack transparency in their decision-making processes. We address these challenges by introducing X-Guard agent, a transparent multilingual safety agent designed to provide content moderation across diverse linguistic contexts. X-Guard effectively defends against both conventional low-resource language attacks and sophisticated code-switching attacks. Our approach includes: curating and enhancing multiple open-source safety datasets with explicit evaluation rationales; employing a jury of judges methodology to mitigate individual judge LLM provider biases; creating a comprehensive multilingual safety dataset spanning 132 languages with 5 million data points; and developing a two-stage architecture combining a custom-finetuned mBART-50 translation module with an evaluation X-Guard 3B model trained through supervised finetuning and GRPO training. Our empirical evaluations demonstrate X-Guard's effectiveness in detecting unsafe content across multiple languages while maintaining transparency throughout the safety evaluation process. Our work represents a significant advancement in creating robust, transparent, and linguistically inclusive safety systems for LLMs and its integrated systems.

Key facts. Cited by 13 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 28 of its 55 references that are in the map. First posted on arXiv 11 Apr 2025.

Builds on

28 of 55 references.

Closest ancestors · 1

Same direction, newest first

  1. 2024AutoDefense: Multi-Agent LLM Defense against Jailbreak Attacks2 Mar

Other references · 27

  1. 2022Training language models to follow instructions with human feedbackcited by 15,712
  2. 2024The Llama 3 Herd of Modelscited by 14,192
  3. 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 8,851
  4. 2017Deep reinforcement learning from human preferencescited by 3,846
  5. 2023Self-Refine: Iterative Refinement with Self-Feedbackcited by 3,317
  6. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
  7. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,124
  8. 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 460
  9. 2023Harnessing the Power of LLMs in Practice: A Survey on ChatGPT and Beyondcited by 409
  10. 2023Jailbreak and Guard Aligned Language Models with Only Few In-Context Demonstrationscited by 401
  11. 2023NeMo Guardrails: A Toolkit for Controllable and Safe LLM Applications with Programmable Railscited by 347
  12. 2020Multilingual Translation with Extensible Multilingual Pretraining and Finetuningcited by 287
15 more
  1. 2024ShieldGemma: Generative AI Content Moderation Based on Gemmacited by 224
  2. 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 126
  3. 2024ALERT: A Comprehensive Benchmark for Assessing Large Language Models' Safety through Red Teamingcited by 96
  4. 2025GuardReasoner: Towards Reasoning-based LLM Safeguardscited by 89
  5. 2024RigorLLM: Resilient Guardrails for Large Language Models against Undesired Contentcited by 65
  6. 2024Universal Vulnerabilities in Large Language Models: Backdoor Attacks for In-context Learningcited by 47
  7. 2023Hijacking Large Language Models via Adversarial In-Context Learningcited by 41
  8. 2024R2-Guard: Robust Reasoning Enabled LLM Guardrail via Knowledge-Enhanced Logical Reasoningcited by 41
  9. 2025Reasoning-to-Defend: Safety-Aware Reasoning Can Defend Large Language Models from Jailbreakingcited by 34
  10. 2025ThinkGuard: Deliberative Slow Thinking Leads to Cautious Guardrailscited by 29
  11. 2024Llama Guard 3-1B-INT4: Compact and Efficient Safeguard for Human-AI Conversationscited by 24
  12. 2025BingoGuard: LLM Content Moderation Tools with Risk Levelscited by 20
  13. 2023TaCo: Enhancing Cross-Lingual Transfer for Low-Resource Languages in LLMs through Translation-Assisted Chain-of-Thought Processescited by 18
  14. 2024HarmAug: Effective Data Augmentation for Knowledge Distillation of Safety Guard Modelscited by 17
  15. 2024Benchmarking LLM Guardrails in Handling Multilingual Toxicitycited by 13

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 8; 2026: 5.

13 papers.

Sort:

By area:

Similar, not cited

Close in wording, no citation either way

  1. 2025MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safety
  2. 2023All Languages Matter: On the Multilingual Safety of Large Language Models
  3. 2025CultureGuard: Towards Culturally-Aware Dataset and Guard Model for Multilingual Safety Applications
  4. 2025SEALGuard: Safeguarding the Multilingual Conversations in Southeast Asian Languages for LLM Software Systems
  5. 2024The Language Barrier: Dissecting Safety Challenges of LLMs in Multilingual Contexts
  6. 2026Multilingual Safety Alignment Via Sparse Weight Editing
  7. 2026BabelSteering: Multilingual Safety Alignment via English Steering Vectors
  8. 2026CourtGuard: A Model-Agnostic Framework for Zero-Shot Policy Adaptation in LLM Safety