MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safety
On the map: LLM reasoning → Reasoning for agents, planning and code
also in 1 more
Abstract (arXiv)
Large Language Models (LLMs) are susceptible to adversarial attacks such as jailbreaking, which can elicit harmful or unsafe behaviors. This vulnerability is exacerbated in multilingual settings, where multilingual safety-aligned data is often limited. Thus, developing a guardrail capable of detecting and filtering unsafe content across diverse languages is critical for deploying LLMs in real-world applications. In this work, we introduce a multilingual guardrail with reasoning for prompt classification. Our method consists of: (1) synthetic multilingual data generation incorporating culturally and linguistically nuanced variants, (2) supervised fine-tuning, and (3) a curriculum-based Group Relative Policy Optimization (GRPO) framework that further improves performance. Experimental results demonstrate that our multilingual guardrail, MrGuard, consistently outperforms recent baselines across both in-domain and out-of-domain languages by more than 15%. We also evaluate MrGuard's robustness to multilingual variations, such as code-switching and low-resource language distractors in the prompt, and demonstrate that it preserves safety judgments under these challenging conditions. The multilingual reasoning capability of our guardrail enables it to generate explanations, which are particularly useful for understanding language-specific risks and ambiguities in multilingual content moderation.
Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 37 of its 56 references that are in the map. First posted on arXiv 21 Apr 2025.
Builds on
37 of 56 references.
Closest ancestors · 2
Same direction, newest first
- 2025GuardReasoner: Towards Reasoning-based LLM Safeguards30 Jan
- 2024R2-Guard: Robust Reasoning Enabled LLM Guardrail via Knowledge-Enhanced Logical Reasoning8 Jul
Other references · 35
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
- 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
- 2024Qwen2.5 Technical Reportcited by 4,942
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,418
- 2023Tree of Thoughts: Deliberate Problem Solving with Large Language Modelscited by 3,211
- 2023Mistral 7Bcited by 3,164
- 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
- 2025s1: Simple test-time scalingcited by 1,341
- 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
23 more
- 2019On the Cross-lingual Transferability of Monolingual Representationscited by 578
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 496
- 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attackscited by 486
- 2021Curriculum Learning: A Surveycited by 259
- 2023FireAct: Toward Language Agent Fine-tuningcited by 256
- 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 228
- 2024VinePPO: Refining Credit Assignment in RL Training of LLMscited by 183
- 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 136
- 2025Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrailscited by 132
- 2024Watch Every Step! LLM Agent Learning via Iterative Step-Level Process Refinementcited by 88
- 2024The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harmcited by 70
- 2024MAPO: Advancing Multilingual Reasoning through Multilingual Alignment-as-Preference Optimizationcited by 69
- 2024RigorLLM: Resilient Guardrails for Large Language Models against Undesired Contentcited by 68
- 2023All Languages Matter: On the Multilingual Safety of Large Language Modelscited by 53
- 2024Multilingual Large Language Model: A Survey of Resources, Taxonomy and Frontierscited by 51
- 2024RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?cited by 36
- 2024Curriculum Direct Preference Optimization for Diffusion and Consistency Modelscited by 36
- 2024Code-Switching Red-Teaming: LLM Evaluation for Safety and Multilingual Understandingcited by 34
- 2024Sandwich attack: Multi-language Mixture Adaptive Attack on LLMscited by 20
- 2024PolygloToxicityPrompts: Multilingual Evaluation of Neural Toxic Degeneration in Large Language Modelscited by 20
- 2025Enhancing LLM Safety Through a Theoretical Minimax Game Lenscited by 19
- 2024Benchmarking LLM Guardrails in Handling Multilingual Toxicitycited by 14
- 2023Multilingual Content Moderation: A Case Study on Redditcited by 8
Built on by
Citing papers per year: 2025: 2; 2026: 7.
9 papers.
- 2025Agentic Web: Weaving the Next Web with AI Agentscited by 45
- 2025A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Modelscited by 25
- 2026SEA-Guard: Culturally Grounded Multilingual Safeguard for Southeast Asiacited by 2
- 2026BabelSafe: A Policy-Grounded Multilingual Safety Benchmark for LLMscited by 1
- 2026Risk-Aware LLM Agents for Geospatial Data Retrieval: Design and Preliminary Adversarial Evaluationcited by 0
- 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Modelscited by 0
- 2026ArabicDialectSafety: A Dialect-Aware Benchmark for Arabic Content Safety Classificationcited by 0
- 2026LLM Safety Alignment in Low-Resource Languages: A Systematic Literature Reviewcited by 0
- 2026CultureMINE: Datasets and Methods for Improving the Cultural Capabilities of NLP Systemscited by 0
- 2026CultureMINE: Datasets and Methods for Improving the Cultural Capabilities of NLP Systems18 Sep 2026
- 2026ArabicDialectSafety: A Dialect-Aware Benchmark for Arabic Content Safety Classification2 Aug 2026
- 2026LLM Safety Alignment in Low-Resource Languages: A Systematic Literature Review20 Jul 2026
- 2026A Survey of Toxicity Detection and Mitigation Strategies for Multilingual Language Models24 Jun 2026
- 2026Risk-Aware LLM Agents for Geospatial Data Retrieval: Design and Preliminary Adversarial Evaluation13 Jun 2026
- 2026BabelSafe: A Policy-Grounded Multilingual Safety Benchmark for LLMs1 May 2026
- 2026SEA-Guard: Culturally Grounded Multilingual Safeguard for Southeast Asia2 Feb 2026
- 2025A Comprehensive Survey on Trustworthiness in Reasoning with Large Language Models4 Sep 2025
- 2025Agentic Web: Weaving the Next Web with AI Agents28 Jul 2025
Similar, not cited
Close in wording, no citation either way
- 2025X-Guard: Multilingual Guard Agent for Content Moderation
- 2025SEALGuard: Safeguarding the Multilingual Conversations in Southeast Asian Languages for LLM Software Systems
- 2026IndicGuard: A Multilingual Safety Guard Model and Dataset for Indic Languages
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languages
- 2024The Language Barrier: Dissecting Safety Challenges of LLMs in Multilingual Contexts
- 2025CREST: Universal Safety Guardrails Through Cluster-Guided Cross-Lingual Transfer
- 2025Multilingual Collaborative Defense for Large Language Models
- 2026SurakshaEval: An Indic Safety Benchmark for Multilingual LLMs