Model profile
GPT OSS Safeguard 20B
Evidence summary
Safety. GPT OSS Safeguard 20B has an estimated Safety rank of #113; its 90% source-sensitivity interval is #30–#208. Its behavior-only rank is #125; company governance moves the combined estimate to #113. Published Safety evidence spans 4 eval lineages and 5 of 7 components. Its strongest relative result is Enkrypt AI Safety Leaderboard (bias_attack_non_success_rate, #63 of 248); its weakest is DystopiaBench (laguardia_score, #39 of 50).
Freedom. GPT OSS Safeguard 20B has an estimated Freedom rank of #398; its 90% source-sensitivity interval is #207–#538. Published Freedom evidence spans 2 eval lineages and 1 of 1 components. Its strongest relative result is Enkrypt AI Safety Leaderboard (cbrn_attack_non_success_rate, #62 of 248); its weakest is Cisco AI Defense Rolling Single-Turn Leaderboard (single_turn_attack_success_rate, #74 of 104).
Compare this model
Only models sharing at least one published sub-eval are listed.
Official and reference links
- Hugging Face ↗openai/gpt-oss-safeguard-20b
- OpenRouter ↗openai/gpt-oss-safeguard-20b
- Official model page ↗Exact model document · Reviewed official Hugging Face owner · official repository
- Release source ↗direct research preview identity date
Safety evals
Rank and direction are specific to the Safety portfolio. Black marks the observed result; the grey dot marks the value implied by the Safety rank. Values stay on each source’s native scale.
| Eval / sub-eval | Rank | Value | Distribution | Source |
|---|---|---|---|---|
| Cisco AI Defense Rolling Single-Turn Leaderboardsingle_turn_attack_success_rate | #31 / 104 | ↓17.55 | Source ↗official | |
| DystopiaBenchbasaglia_score | #36 / 50 | ↓68.63 | Source ↗official | |
| DystopiaBenchbaudrillard_score | #34 / 50 | ↓64.37 | Source ↗official | |
| DystopiaBenchhuxley_score | #26 / 50 | ↓72 | Source ↗official | |
| DystopiaBenchlaguardia_score | #39 / 50 | ↓69.4 | Source ↗official | |
| DystopiaBenchorwell_score | #35 / 50 | ↓73.53 | Source ↗official | |
| DystopiaBenchpetrov_score | #29 / 50 | ↓73.6 | Source ↗official | |
| Enkrypt AI Safety Leaderboardbias_attack_non_success_rate | #63 / 248 | ↑25.58 | Source ↗official | |
| Enkrypt AI Safety Leaderboardcbrn_attack_non_success_rate | #186 / 248 | ↑82 | Source ↗official | |
| Enkrypt AI Safety Leaderboardharmful_attack_non_success_rate | #112 / 248 | ↑74.44 | Source ↗official | |
| Enkrypt AI Safety Leaderboardtoxicity_attack_non_success_rate | #108 / 246 | ↑96.91 | Source ↗official | |
| TACbase_welfare_rate | #39 / 87 | ↑28.21 | Source ↗self run |
Freedom evals
Rank and direction are specific to the Freedom portfolio. Black marks the observed result; the grey dot marks the value implied by the Freedom rank. Values stay on each source’s native scale.
| Eval / sub-eval | Rank | Value | Distribution | Source |
|---|---|---|---|---|
| Cisco AI Defense Rolling Single-Turn Leaderboardsingle_turn_attack_success_rate | #74 / 104 | ↑17.55 | Source ↗official | |
| Enkrypt AI Safety Leaderboardcbrn_attack_non_success_rate | #62 / 248 | ↓82 | Source ↗official | |
| Enkrypt AI Safety Leaderboardharmful_attack_non_success_rate | #136 / 248 | ↓74.44 | Source ↗official | |
| Enkrypt AI Safety Leaderboardtoxicity_attack_non_success_rate | #136 / 246 | ↓96.91 | Source ↗official |