mlsanityData to 14 Oct 2026

aiXamine: Simplified LLM Safety and Security

arXiv 2504.14985 ↗First posted 21 Apr 2025cs.CR cs.AIcited by 4

On the map: LLM safety and security → Safety alignment, refusal and guardrails

Abstract (arXiv)

Evaluating Large Language Models (LLMs) for safety and security remains a complex task, often requiring users to navigate a fragmented landscape of ad hoc benchmarks, datasets, metrics, and reporting formats. To address this challenge, we present aiXamine, a comprehensive black-box evaluation platform for LLM safety and security. aiXamine integrates over 40 tests (i.e., benchmarks) organized into eight key services targeting specific dimensions of safety and security: adversarial robustness, code security, fairness and bias, hallucination, model and data privacy, out-of-distribution (OOD) robustness, over-refusal, and safety alignment. The platform aggregates the evaluation results into a single detailed report per model, providing a detailed breakdown of model performance, test examples, and rich visualizations. We used aiXamine to assess over 50 publicly available and proprietary LLMs, conducting over 2K examinations. Our findings reveal notable vulnerabilities in leading models, including susceptibility to adversarial attacks in OpenAI's GPT-4o, biased outputs in xAI's Grok-3, and privacy weaknesses in Google's Gemini 2.0. Additionally, we observe that open-source models can match or exceed proprietary models in specific services such as safety alignment, fairness and bias, and OOD robustness. Finally, we identify trade-offs between distillation strategies, model size, training methods, and architectural choices.

Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 72 of its 132 references that are in the map. First posted on arXiv 21 Apr 2025.

Builds on

72 of 132 references.

Closest ancestors · 3

Same direction, newest first

  1. 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs26 Jun
  2. 2024OR-Bench: An Over-Refusal Benchmark for Large Language Models31 May
  3. 2024The Ethics of Interaction: Mitigating Security Threats in LLMs22 Jan

Other references · 69

  1. 2020Language Models are Few-Shot Learnerscited by 32,419
  2. 2024The Llama 3 Herd of Modelscited by 14,715
  3. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  4. 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
  5. 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
  6. 2024Qwen2.5 Technical Reportcited by 4,942
  7. 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,899
  8. 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,886
  9. 2024GPT-4o System Cardcited by 4,588
  10. 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,148
  11. 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,754
  12. 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
38 more
  1. 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,955
  2. 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
  3. 2022Survey of Hallucination in Natural Language Generationcited by 2,075
  4. 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
  5. 2023A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questionscited by 1,601
  6. 2017Get To The Point: Summarization with Pointer-Generator Networkscited by 1,292
  7. 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
  8. 2024Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preferencecited by 1,184
  9. 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 1,006
  10. 2021Ethical and social risks of harm from Language Modelscited by 966
  11. 2016Adversarial Machine Learning at Scalecited by 936
  12. 2019DROP: A Reading Comprehension Benchmark Requiring Discrete Reasoning Over Paragraphscited by 903
  13. 2017RACE: Large-scale ReAding Comprehension Dataset From Examinationscited by 861
  14. 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
  15. 2023SelfCheckGPT: Zero-Resource Black-Box Hallucination Detection for Generative Large Language Modelscited by 810
  16. 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 807
  17. 2021BARTScore: Evaluating Generated Text as Text Generationcited by 722
  18. 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 671
  19. 2023Bias and Fairness in Large Language Models: A Surveycited by 639
  20. 2017Adversarial Examples for Evaluating Reading Comprehension Systemscited by 571
  21. 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 518
  22. 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
  23. 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 491
  24. 2018TextBugger: Generating Adversarial Text Against Real-world Applicationscited by 381
  25. 2024Measuring short-form factuality in large language modelscited by 373
  26. 2023GPTScore: Evaluate as You Desirecited by 361
  27. 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 356
  28. 2023HaluEval: A Large-Scale Hallucination Evaluation Benchmark for Large Language Modelscited by 341
  29. 2024Hallucination is Inevitable: An Innate Limitation of Large Language Modelscited by 332
  30. 2016NewsQA: A Machine Comprehension Datasetcited by 331
  31. 2023Chain-of-Verification Reduces Hallucination in Large Language Modelscited by 324
  32. 2018Adversarial Example Generation with Syntactically Controlled Paraphrase Networkscited by 286
  33. 2024TrustLLM: Trustworthiness in Large Language Modelscited by 285
  34. 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 240
  35. 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 232
  36. 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
  37. 2017SearchQA: A New Q&A Dataset Augmented with Context from a Search Enginecited by 225
  38. 2023Red-Teaming Large Language Models using Chain of Utterances for Safety-Alignmentcited by 223

50 most cited of 69 All 69 (JSON)

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 3.

4 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2026aiXamine: Unified Black-Box Evaluation of Cross-Dimensional Trade-offs in LLM Safety, Security, and Privacy
  2. 2025LLM-Safety Evaluations Lack Robustness
  3. 2025AdversariaLLM: A Unified and Modular Toolbox for LLM Robustness Research
  4. 2026CSSBench: Evaluating the Safety of Lightweight LLMs against Chinese-Specific Adversarial Patterns
  5. 2024Current state of LLM Risks and AI Guardrails
  6. 2024Large Language Model Safety: A Holistic Survey
  7. 2024Fine-Tuning, Quantization, and LLMs: Navigating Unintended Outcomes
  8. 2025Safety and Security Analysis of Large Language Models: Benchmarking Risk Profile and Harm Potential