aiXamine: Simplified LLM Safety and Security
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
Evaluating Large Language Models (LLMs) for safety and security remains a complex task, often requiring users to navigate a fragmented landscape of ad hoc benchmarks, datasets, metrics, and reporting formats. To address this challenge, we present aiXamine, a comprehensive black-box evaluation platform for LLM safety and security. aiXamine integrates over 40 tests (i.e., benchmarks) organized into eight key services targeting specific dimensions of safety and security: adversarial robustness, code security, fairness and bias, hallucination, model and data privacy, out-of-distribution (OOD) robustness, over-refusal, and safety alignment. The platform aggregates the evaluation results into a single detailed report per model, providing a detailed breakdown of model performance, test examples, and rich visualizations. We used aiXamine to assess over 50 publicly available and proprietary LLMs, conducting over 2K examinations. Our findings reveal notable vulnerabilities in leading models, including susceptibility to adversarial attacks in OpenAI's GPT-4o, biased outputs in xAI's Grok-3, and privacy weaknesses in Google's Gemini 2.0. Additionally, we observe that open-source models can match or exceed proprietary models in specific services such as safety alignment, fairness and bias, and OOD robustness. Finally, we identify trade-offs between distillation strategies, model size, training methods, and architectural choices.
Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 72 of its 132 references that are in the map. First posted on arXiv 21 Apr 2025.
Builds on
72 of 132 references.
Closest ancestors · 3
Same direction, newest first
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs26 Jun
- 2024OR-Bench: An Over-Refusal Benchmark for Large Language Models31 May
- 2024The Ethics of Interaction: Mitigating Security Threats in LLMs22 Jan
Other references · 69
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,512
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,899
- 2018Think you have Solved Question Answering? Try ARC, the AI2 Reasoning Challengecited by 4,886
- 2024GPT-4o System Cardcited by 4,588
- 2016SQuAD: 100,000+ Questions for Machine Comprehension of Textcited by 4,148
- 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,754
- 2021TruthfulQA: Measuring How Models Mimic Human Falsehoodscited by 2,975
38 more
- 2017TriviaQA: A Large Scale Distantly Supervised Challenge Dataset for Reading Comprehensioncited by 2,955
- 2016Membership Inference Attacks against Machine Learning Modelscited by 2,281
- 2022Survey of Hallucination in Natural Language Generationcited by 2,075
- 2019A Survey on Bias and Fairness in Machine Learningcited by 1,917
- 2023A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questionscited by 1,601
- 2017Get To The Point: Summarization with Pointer-Generator Networkscited by 1,292
- 2020RealToxicityPrompts: Evaluating Neural Toxic Degeneration in Language Modelscited by 1,255
- 2024Chatbot Arena: An Open Platform for Evaluating LLMs by Human Preferencecited by 1,184
- 2020Beyond Accuracy: Behavioral Testing of NLP models with CheckListcited by 1,006
- 2021Ethical and social risks of harm from Language Modelscited by 966
- 2016Adversarial Machine Learning at Scalecited by 936
- 2019DROP: A Reading Comprehension Benchmark Requiring Discrete Reasoning Over Paragraphscited by 903
- 2017RACE: Large-scale ReAding Comprehension Dataset From Examinationscited by 861
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2023SelfCheckGPT: Zero-Resource Black-Box Hallucination Detection for Generative Large Language Modelscited by 810
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 807
- 2021BARTScore: Evaluating Generated Text as Text Generationcited by 722
- 2019Is BERT Really Robust? A Strong Baseline for Natural Language Attack on Text Classification and Entailmentcited by 671
- 2023Bias and Fairness in Large Language Models: A Surveycited by 639
- 2017Adversarial Examples for Evaluating Reading Comprehension Systemscited by 571
- 2023DecodingTrust: A Comprehensive Assessment of Trustworthiness in GPT Modelscited by 518
- 2023XSTest: A Test Suite for Identifying Exaggerated Safety Behaviours in Large Language Modelscited by 505
- 2020BERT-ATTACK: Adversarial Attack Against BERT Using BERTcited by 491
- 2018TextBugger: Generating Adversarial Text Against Real-world Applicationscited by 381
- 2024Measuring short-form factuality in large language modelscited by 373
- 2023GPTScore: Evaluate as You Desirecited by 361
- 2022A Holistic Approach to Undesired Content Detection in the Real Worldcited by 356
- 2023HaluEval: A Large-Scale Hallucination Evaluation Benchmark for Large Language Modelscited by 341
- 2024Hallucination is Inevitable: An Innate Limitation of Large Language Modelscited by 332
- 2016NewsQA: A Machine Comprehension Datasetcited by 331
- 2023Chain-of-Verification Reduces Hallucination in Large Language Modelscited by 324
- 2018Adversarial Example Generation with Syntactically Controlled Paraphrase Networkscited by 286
- 2024TrustLLM: Trustworthiness in Large Language Modelscited by 285
- 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 240
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 232
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 230
- 2017SearchQA: A New Q&A Dataset Augmented with Context from a Search Enginecited by 225
- 2023Red-Teaming Large Language Models using Chain of Utterances for Safety-Alignmentcited by 223
50 most cited of 69 All 69 (JSON)
Built on by
Citing papers per year: 2025: 1; 2026: 3.
4 papers.
- 2025A Novel Evaluation Benchmark for Medical LLMs: Illuminating Safety and Effectiveness in Clinical Domainscited by 28
- 2026Evaluating LLM Safety Under Repeated Inference via Accelerated Prompt Stress Testingcited by 1
- 2026Evaluating Reliability Gaps in Large Language Model Safety via Repeated Prompt Samplingcited by 1
- 2026SSP-Bench: A Hybrid Data Generation Framework for Safety, Security, and Privacy Evaluationcited by 0
- 2026SSP-Bench: A Hybrid Data Generation Framework for Safety, Security, and Privacy Evaluation21 Sep 2026
- 2026Evaluating Reliability Gaps in Large Language Model Safety via Repeated Prompt Sampling10 Mar 2026
- 2026Evaluating LLM Safety Under Repeated Inference via Accelerated Prompt Stress Testing12 Feb 2026
- 2025A Novel Evaluation Benchmark for Medical LLMs: Illuminating Safety and Effectiveness in Clinical Domains31 Jul 2025
Similar, not cited
Close in wording, no citation either way
- 2026aiXamine: Unified Black-Box Evaluation of Cross-Dimensional Trade-offs in LLM Safety, Security, and Privacy
- 2025LLM-Safety Evaluations Lack Robustness
- 2025AdversariaLLM: A Unified and Modular Toolbox for LLM Robustness Research
- 2026CSSBench: Evaluating the Safety of Lightweight LLMs against Chinese-Specific Adversarial Patterns
- 2024Current state of LLM Risks and AI Guardrails
- 2024Large Language Model Safety: A Holistic Survey
- 2024Fine-Tuning, Quantization, and LLMs: Navigating Unintended Outcomes
- 2025Safety and Security Analysis of Large Language Models: Benchmarking Risk Profile and Harm Potential