Deep Research with Open-Domain Evaluation and Multi-Stage Guardrails for Safety
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
Deep research frameworks have shown promising capabilities in synthesizing comprehensive reports from web sources. While deep research possesses significant potential to address complex issues through planning and research cycles, existing frameworks are deficient in sufficient evaluation procedures and stage-specific protections. They typically treat evaluation as exact match accuracy of question-answering, but overlook crucial aspects of report quality such as credibility, coherence, breadth, depth, and safety. This oversight may result in hazardous or malicious sources being integrated into the final report. To address this, we introduce DeepResearchGuard, a framework featuring four-stage safeguards with open-domain evaluation, and DRSafeBench, a novel stage-wise safety benchmark. Evaluating across GPT-4o, o4-mini, Gemini-2.5-flash, DeepSeek-v3, GPT-5, DeepResearchGuard improves defense success rates by 16.53% while reducing over-refusal to 6%. Through extensive experiments, we show that DRSafeBench enables comprehensive open-domain evaluation and stage-aware defenses that effectively block harmful content propagation, while systematically improving report quality without excessive over-refusal rates.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 27 of its 76 references that are in the map. First posted on arXiv 13 Oct 2025.
Builds on
27 of 76 references.
Closest ancestors · 2
Same direction, newest first
- 2025ThinkGuard: Deliberative Slow Thinking Leads to Cautious Guardrails19 Feb
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs26 Jun
Other references · 25
- 2018HotpotQA: A Dataset for Diverse, Explainable Multi-hop Question Answeringcited by 3,754
- 2023GPQA: A Graduate-Level Google-Proof Q&A Benchmarkcited by 2,879
- 2025Search-R1: Training LLMs to Reason and Leverage Search Engines with Reinforcement Learningcited by 1,444
- 2023BeaverTails: Towards Improved Safety Alignment of LLM via a Human-Preference Datasetcited by 860
- 2024Agent Security Bench (ASB): Formalizing and Benchmarking Attacks and Defenses in LLM-based Agentscited by 369
- 2025WebThinker: Empowering Large Reasoning Models with Deep Research Capabilitycited by 335
- 2024MultiHop-RAG: Benchmarking Retrieval-Augmented Generation for Multi-Hop Queriescited by 257
- 2024SORRY-Bench: Systematically Evaluating Large Language Model Safety Refusalcited by 240
- 2024SALAD-Bench: A Hierarchical and Comprehensive Safety Benchmark for Large Language Modelscited by 228
- 2025Survey on Evaluation of LLM-based Agentscited by 204
- 2025BrowseComp-Plus: A More Fair and Transparent Evaluation Benchmark of Deep-Research Agentcited by 200
- 2025MMSearch-R1: Incentivizing LMMs to Searchcited by 124
13 more
- 2025Agentic Reasoning: A Streamlined Framework for Enhancing LLM Reasoning with Agentic Toolscited by 106
- 2025AGrail: A Lifelong Agent Guardrail with Effective and Adaptive Safety Detectioncited by 89
- 2025From Web Search towards Agentic Deep Research: Incentivizing Search with Reasoning Agentscited by 51
- 2025Open Deep Search: Democratizing Search with Open-source Reasoning Agentscited by 49
- 2025AgentSafe: Safeguarding Large Language Model-based Multi-agent Systems via Hierarchical Data Managementcited by 38
- 2025ReportBench: Evaluating Deep Research Agents via Academic Survey Taskscited by 38
- 2025Characterizing Deep Research: A Benchmark and Formal Definitioncited by 30
- 2025BingoGuard: LLM Content Moderation Tools with Risk Levelscited by 21
- 2025Unsafe LLM-Based Search: Quantitative Analysis and Mitigation of Safety Risks in AI Web Searchcited by 16
- 2025Reinforcement Learning Foundations for Deep Research Systems: A Surveycited by 14
- 2025Universal Deep Research: Bring Your Own Model and Strategycited by 4
- 2025MADIAVE: Multi-Agent Debate for Implicit Attribute Value Extractioncited by 2
- 2025Structure-Guided Memory Consolidation for Mitigating Compounding Errors in Literature Review Generationcited by 1
Built on by
Citing papers per year: 2025: 1; 2026: 6.
7 papers.
- 2026CoEvoSkills: Self-Evolving Agent Skills via Co-Evolutionary Verificationcited by 128
- 2026A Survey of Agent Memory in the Second Half: Towards Self-Evolving and Long-Horizon Agentscited by 44
- 2026MemoryCD: Benchmarking Long-Context User Memory of LLM Agents for Lifelong Cross-Domain Personalizationcited by 17
- 2026From Chatbot to Digital Colleague: The Paradigm Shift Toward Persistent Autonomous AIcited by 6
- 2025Embracing Trustworthy Brain-Agent Collaboration as Paradigm Extension for Intelligent Assistive Technologiescited by 5
- 2026When Only the Final Text Survives: Implicit Execution Tracing for Multi-Agent Auditingcited by 3
- 2026Distributionally Robust Set Representation Learning Under Inference-Time Element Corruptioncited by 0
- 2026From Chatbot to Digital Colleague: The Paradigm Shift Toward Persistent Autonomous AI12 Jun 2026
- 2026Distributionally Robust Set Representation Learning Under Inference-Time Element Corruption28 May 2026
- 2026CoEvoSkills: Self-Evolving Agent Skills via Co-Evolutionary Verification2 Apr 2026
- 2026MemoryCD: Benchmarking Long-Context User Memory of LLM Agents for Lifelong Cross-Domain Personalization26 Mar 2026
- 2026When Only the Final Text Survives: Implicit Execution Tracing for Multi-Agent Auditing18 Mar 2026
- 2026A Survey of Agent Memory in the Second Half: Towards Self-Evolving and Long-Horizon Agents14 Jan 2026
- 2025Embracing Trustworthy Brain-Agent Collaboration as Paradigm Extension for Intelligent Assistive Technologies25 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2025DeepResearch Bench: A Comprehensive Benchmark for Deep Research Agents
- 2026Benchmarking Hybrid Deep Research Across Database Querying and Web Search
- 2025DeepTRACE: Auditing Deep Research AI Systems for Tracking Reliability Across Citations and Evidence
- 2026HiEviDR-Bench: A Benchmark for Hierarchical Evidence Aggregation in Deep Research
- 2025Understanding DeepResearch via Reports
- 2026Open-Domain Safety Policy Construction
- 2024Challenges in Guardrailing Large Language Models for Science
- 2025DeepResearchGym: A Free, Transparent, and Reproducible Evaluation Sandbox for Deep Research