CREST: Universal Safety Guardrails Through Cluster-Guided Cross-Lingual Transfer
On the map: LLM safety and security → Safety alignment, refusal and guardrails
Abstract (arXiv)
Ensuring content safety in large language models (LLMs) is essential for their deployment in real-world applications. However, existing safety guardrails are predominantly tailored for high-resource languages, leaving a significant portion of the world's population underrepresented who communicate in low-resource languages. To address this, we introduce CREST (CRoss-lingual Efficient Safety Transfer), a parameter-efficient multilingual safety classification model that supports 100 languages with only 0.5B parameters. By training on a strategically chosen subset of only 13 high-resource languages, our model utilizes cluster-based cross-lingual transfer from a few to 100 languages, enabling effective generalization to both unseen high-resource and low-resource languages. This approach addresses the challenge of limited training data in low-resource settings. We conduct comprehensive evaluations across six safety benchmarks to demonstrate that CREST outperforms existing state-of-the-art guardrails of comparable scale and achieves competitive results against models with significantly larger parameter counts (2.5B parameters and above). Our findings highlight the limitations of language-specific guardrails and underscore the importance of developing universal, language-agnostic safety systems that can scale effectively to serve global populations.
Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Placed in Safety alignment, refusal and guardrails, one of 12 directions in LLM safety and security. Builds on 25 of its 43 references that are in the map. First posted on arXiv 2 Dec 2025.
Builds on
25 of 43 references.
Closest ancestors · 5
Same direction, newest first
- 2025X-Guard: Multilingual Guard Agent for Content Moderation11 Apr
- 2025Aegis2.0: A Diverse AI Safety Dataset and Risks Taxonomy for Alignment of LLM Guardrails15 Jan
- 2024Benchmarking LLM Guardrails in Handling Multilingual Toxicity29 Oct
- 2024The Multilingual Alignment Prism: Aligning Global and Local Preferences to Reduce Harm26 Jun
- 2024WildGuard: Open One-Stop Moderation Tools for Safety Risks, Jailbreaks, and Refusals of LLMs26 Jun
Other references · 20
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2023GPT-4 Technical Reportcited by 18,396
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2024GPT-4o System Cardcited by 4,588
- 2019Unsupervised Cross-lingual Representation Learning at Scalecited by 3,935
- 2019HuggingFace's Transformers: State-of-the-art Natural Language Processingcited by 2,218
- 2024HarmBench: A Standardized Evaluation Framework for Automated Red Teaming and Robust Refusalcited by 1,429
- 2020Beyond English-Centric Multilingual Machine Translationcited by 561
- 2021Datasets: A Community Library for Natural Language Processingcited by 530
- 2020Multilingual Translation with Extensible Multilingual Pretraining and Finetuningcited by 287
- 2019Massively Multilingual Neural Machine Translation in the Wild: Findings and Challengescited by 257
- 2024JailBreakV: A Benchmark for Assessing the Robustness of MultiModal Large Language Models against Jailbreak Attackscited by 230
8 more
- 2022A New Generation of Perspective API: Efficient Multilingual Character-level Transformerscited by 185
- 2025PolyGuard: A Multilingual Safety Moderation Tool for 17 Languagescited by 59
- 2019Multilingual Neural Machine Translation with Language Clusteringcited by 47
- 2024RTP-LX: Can LLMs Evaluate Toxicity in Multilingual Scenarios?cited by 36
- 2024Code-Switching Red-Teaming: LLM Evaluation for Safety and Multilingual Understandingcited by 34
- 2021MetaXL: Meta Representation Transformation for Low-resource Cross-lingual Learningcited by 21
- 2022Meta-XNLG: A Meta-Learning Approach Based on Language Clustering for Zero-Shot Cross-Lingual Transfer and Generationcited by 4
- 2024Selected Languages are All You Need for Cross-lingual Truthfulness Transfercited by 4
Built on by
Citing papers per year: 2026: 2.
2 papers.
Similar, not cited
Close in wording, no citation either way
- 2023All Languages Matter: On the Multilingual Safety of Large Language Models
- 2026Multilingual Safety Signals Are Multi-Layered: Filtering Safety-Degrading Data for Safer LLMs
- 2026Why Do Safety Guardrails Degrade Across Languages?
- 2025SEALGuard: Safeguarding the Multilingual Conversations in Southeast Asian Languages for LLM Software Systems
- 2025MrGuard: A Multilingual Reasoning Guardrail for Universal LLM Safety
- 2026BabelSteering: Multilingual Safety Alignment via English Steering Vectors
- 2025The Problem with Safety Classification is not just the Models
- 2026Multilingual Safety Alignment Via Sparse Weight Editing