mlsanityData to 14 Oct 2026

MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safety

arXiv 2504.15241 ↗First posted 21 Apr 2025cs.CLcited by 9

On the map: LLM reasoning → Reasoning for agents, planning and code

also in 1 more
Abstract (arXiv)

Large Language Models (LLMs) are susceptible to adversarial attacks such as jailbreaking, which can elicit harmful or unsafe behaviors. This vulnerability is exacerbated in multilingual settings, where multilingual safety-aligned data is often limited. Thus, developing a guardrail capable of detecting and filtering unsafe content across diverse languages is critical for deploying LLMs in real-world applications. In this work, we introduce a multilingual guardrail with reasoning for prompt classification. Our method consists of: (1) synthetic multilingual data generation incorporating culturally and linguistically nuanced variants, (2) supervised fine-tuning, and (3) a curriculum-based Group Relative Policy Optimization (GRPO) framework that further improves performance. Experimental results demonstrate that our multilingual guardrail, MrGuard, consistently outperforms recent baselines across both in-domain and out-of-domain languages by more than 15%. We also evaluate MrGuard's robustness to multilingual variations, such as code-switching and low-resource language distractors in the prompt, and demonstrate that it preserves safety judgments under these challenging conditions. The multilingual reasoning capability of our guardrail enables it to generate explanations, which are particularly useful for understanding language-specific risks and ambiguities in multilingual content moderation.

Key facts. Cited by 9 papers in the map (data through 14 Oct 2026). Placed in Reasoning for agents, planning and code, one of 17 directions in LLM reasoning. Builds on 37 of its 56 references that are in the map. First posted on arXiv 21 Apr 2025.

Builds on

37 of 56 references.

Closest ancestors · 2

Same direction, newest first

  1. 2025GuardReasoner: Towards Reasoning-based LLM Safeguards30 Jan
  2. 2024R2-Guard: Robust Reasoning Enabled LLM Guardrail via Knowledge-Enhanced Logical Reasoning8 Jul

Other references · 35

  1. 2024The Llama 3 Herd of Modelscited by 14,715
  2. 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
  3. 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
  4. 2024DeepSeekMath: Pushing the Limits of Mathematical Reasoning in Open Language Modelscited by 9,379
  5. 2025DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learningcited by 6,330
  6. 2024Qwen2.5 Technical Reportcited by 4,942
  7. 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,418
  8. 2023Tree of Thoughts: Deliberate Problem Solving with Large Language Modelscited by 3,211
  9. 2023Mistral 7Bcited by 3,164
  10. 2023Jailbreaking Black Box Large Language Models in Twenty Queriescited by 1,420
  11. 2025s1: Simple test-time scalingcited by 1,341
  12. 2023Llama Guard: LLM-based Input-Output Safeguard for Human-AI Conversationscited by 1,207
23 more
  1. 2019On the Cross-lingual Transferability of Monolingual Representationscited by 578
  2. 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMscited by 496
  3. 2024Jailbreaking Leading Safety-Aligned LLMs with Simple Adaptive Attackscited by 486
  4. 2021Curriculum Learning: A Surveycited by 259
  5. 2023FireAct: Toward Language Agent Fine-tuningcited by 256
  6. 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 228
  7. 2024VinePPO: Refining Credit Assignment in RL Training of LLMscited by 183
  8. 2024AEGIS: Online Adaptive AI Content Safety Moderation with Ensemble of LLM Expertscited by 136
  9. 2025Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrailscited by 132
  10. 2024Watch Every Step! LLM Agent Learning via Iterative Step-Level Process Refinementcited by 88
  11. 2024The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harmcited by 70
  12. 2024MAPO: Advancing Multilingual Reasoning through Multilingual Alignment-as-Preference Optimizationcited by 69
  13. 2024RigorLLM: Resilient Guardrails for Large Language Models against Undesired Contentcited by 68
  14. 2023All Languages Matter: On the Multilingual Safety of Large Language Modelscited by 53
  15. 2024Multilingual Large Language Model: A Survey of Resources, Taxonomy and Frontierscited by 51
  16. 2024RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?cited by 36
  17. 2024Curriculum Direct Preference Optimization for Diffusion and Consistency Modelscited by 36
  18. 2024Code-Switching Red-Teaming: LLM Evaluation for Safety and Multilingual Understandingcited by 34
  19. 2024Sandwich attack: Multi-language Mixture Adaptive Attack on LLMscited by 20
  20. 2024PolygloToxicityPrompts: Multilingual Evaluation of Neural Toxic Degeneration in Large Language Modelscited by 20
  21. 2025Enhancing LLM Safety Through a Theoretical Minimax Game Lenscited by 19
  22. 2024Benchmarking LLM Guardrails in Handling Multilingual Toxicitycited by 14
  23. 2023Multilingual Content Moderation: A Case Study on Redditcited by 8

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 2; 2026: 7.

9 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025X-Guard: Multilingual Guard Agent for Content Moderation
  2. 2025SEALGuard: Safeguarding the Multilingual Conversations in Southeast Asian Languages for LLM Software Systems
  3. 2026IndicGuard: A Multilingual Safety Guard Model and Dataset for Indic Languages
  4. 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languages
  5. 2024The Language Barrier: Dissecting Safety Challenges of LLMs in Multilingual Contexts
  6. 2025CREST: Universal Safety Guardrails Through Cluster-Guided Cross-Lingual Transfer
  7. 2025Multilingual Collaborative Defense for Large Language Models
  8. 2026SurakshaEval: An Indic Safety Benchmark for Multilingual LLMs