mlsanityData to 14 Oct 2026

Deep Research with Open-Domain Evaluation and Multi-Stage Guardrails for Safety

arXiv 2510.10994 ↗First posted 13 Oct 2025cs.CL cs.AIcited by 7

On the map: LLM safety and security → Safety alignment, refusal and guardrails

Abstract (arXiv)

Deep research frameworks have shown promising capabilities in synthesizing comprehensive reports from web sources. While deep research possesses significant potential to address complex issues through planning and research cycles, existing frameworks are deficient in sufficient evaluation procedures and stage-specific protections. They typically treat evaluation as exact match accuracy of question-answering, but overlook crucial aspects of report quality such as credibility, coherence, breadth, depth, and safety. This oversight may result in hazardous or malicious sources being integrated into the final report. To address this, we introduce DeepResearchGuard, a framework featuring four-stage safeguards with open-domain evaluation, and DRSafeBench, a novel stage-wise safety benchmark. Evaluating across GPT-4o, o4-mini, Gemini-2.5-flash, DeepSeek-v3, GPT-5, DeepResearchGuard improves defense success rates by 16.53% while reducing over-refusal to 6%. Through extensive experiments, we show that DRSafeBench enables comprehensive open-domain evaluation and stage-aware defenses that effectively block harmful content propagation, while systematically improving report quality without excessive over-refusal rates.

Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 27 of its 76 references that are in the map. First posted on arXiv 13 Oct 2025.

Builds on

27 of 76 references.

Closest ancestors · 2

Same direction, newest first

  1. 2025ThinkGuard: Deliberative Slow Thinking Leads to Cautious Guardrails19 Feb
  2. 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs26 Jun

Other references · 25

  1. 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,754
  2. 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,879
  3. 2025Search-R1: Training LLMs to Reason and Leverage Search Engines with Reinforcement Learningcited by 1,444
  4. 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
  5. 2024Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agentscited by 369
  6. 2025WebThinker: Empowering Large Reasoning Models with Deep Research Capabilitycited by 335
  7. 2024MultiHop-RAG: Benchmarking Retrieval-Augmented Generation for Multi-Hop Queriescited by 257
  8. 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 240
  9. 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 228
  10. 2025Survey on Evaluation of LLM-based Agentscited by 204
  11. 2025BrowseComp-Plus: A More Fair and Transparent Evaluation Benchmark of Deep-Research Agentcited by 200
  12. 2025MMSearch-R1: Incentivizing LMMs to Searchcited by 124
13 more
  1. 2025Agentic Reasoning: A Streamlined Framework for Enhancing LLM Reasoning with Agentic Toolscited by 106
  2. 2025AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detectioncited by 89
  3. 2025From Web Search towards Agentic Deep Research: Incentivizing Search with Reasoning Agentscited by 51
  4. 2025Open Deep Search: Democratizing Search with Open-source Reasoning Agentscited by 49
  5. 2025AgentSafe: Safeguarding Large Language Model-based Multi-agent Systems via Hierarchical Data Managementcited by 38
  6. 2025ReportBench: Evaluating Deep Research Agents via Academic Survey Taskscited by 38
  7. 2025Characterizing Deep Research: A Benchmark and Formal Definitioncited by 30
  8. 2025BingoGuard: LLM Content Moderation Tools with Risk Levelscited by 21
  9. 2025Unsafe LLM-Based Search: Quantitative Analysis and Mitigation of Safety Risks in AI Web Searchcited by 16
  10. 2025Reinforcement Learning Foundations for Deep Research Systems: A Surveycited by 14
  11. 2025Universal Deep Research: Bring Your Own Model and Strategycited by 4
  12. 2025MADIAVE: Multi-Agent Debate for Implicit Attribute Value Extractioncited by 2
  13. 2025Structure-Guided Memory Consolidation for Mitigating Compounding Errors in Literature Review Generationcited by 1

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 6.

7 papers.

Similar, not cited

Close in wording, no citation either way

  1. 2025DeepResearch Bench: A Comprehensive Benchmark for Deep Research Agents
  2. 2026Benchmarking Hybrid Deep Research Across Database Querying and Web Search
  3. 2025DeepTRACE: Auditing Deep Research AI Systems for Tracking Reliability Across Citations and Evidence
  4. 2026HiEviDR-Bench: A Benchmark for Hierarchical Evidence Aggregation in Deep Research
  5. 2025Understanding DeepResearch via Reports
  6. 2026Open-Domain Safety Policy Construction
  7. 2024Challenges in Guardrailing Large Language Models for Science
  8. 2025DeepResearchGym: A Free, Transparent, and Reproducible Evaluation Sandbox for Deep Research