HelpBench
450 real-world privacy, safety and security advice questions across nine topics, scored by rubric for accuracy and tone.
Report says data is on GitHub, but no repo was found.
- Made by
- Released
- June 2026
- Kind
- Wellbeing and sycophancy
- Scored
- Graded by a model
- Answers
- Open-ended
- Tasks
- All public
- Strongest model tested
-
Gemini 4 Argon #9 on the capability index
- Last in a system card
- October 2026
- Last model added
- October 2026
- Scores refreshed
- November 12th, 2026
In the authors’ words
This paper introduces HelpBench, a benchmark for assessing whether LLMs are capable of providing accurate help in response to questions about digital privacy, safety, and security. We curated 450 questions representing authentic user situations and developed rubrics for each question to evaluate the factual accuracy and tone of a response. Example questions touch on how to regain access to lost or suspended accounts, how to balance the trade-offs of hardware security keys versus other forms of two-factor authentication, whether a suspicious email is likely a scam, or whether an abuser might be able to track an individual based on their device peripherals. We then developed and applied an auto-rater to evaluate responses from 18 state-of-the-art LLMs. Our results indicate that while models provide high-quality advice (with scores of 82% on average), one in ten responses from models scores less than 65%, reflecting inaccurate and even harmful advice. Addressing these failures is critical for models to serve as trustworthy sources of assistance for digital privacy, safety, and security needs.
GPT 5.0 (snapshot unspecified) tops the leaderboard with 87%
Best score per entry from the benchmark's own leaderboard, read on November 12th, 2026. Where a model ran with several settings or harnesses, we keep its best. Names in gray aren't in our model list: fine-tunes, agent systems, products and older models. They don't count toward leaders. The best model we track is Claude Opus 4.6, at 84%.
Claude Opus 4.6 leads with 84%, claims included
Best score per model from every source, including labs’ own numbers and claims Epoch AI collected from reports and papers. Labs pick their own settings, so a claim can beat an independent run of the same model.
The newest model with a score here came out in April 2026, and nobody has tested a newer one. Among the 20 highest-ranked models on the capability index, these have no score yet:
- Claude Fable 5.2
-
Gemini 4 Carbon
- GPT-6 Astra
- Claude Opus 5.5
- and 16 more
- 87.0 GPT 5.0 (snapshot unspecified)
- 87.0 GPT 5.3 (snapshot unspecified)
- 84.0 Gemini 3 Flash (snapshot unspecified)
- 84.0 GPT 4.1 (snapshot unspecified)
- 84.0 Claude Opus 4.6
- 83.0 Grok 4
- 83.0 Claude Sonnet 4.6
- 83.0
Qwen 3.6 Plus
- 82.0 Gemini 3.1 Pro (snapshot unspecified)
- 82.0 Claude Sonnet 4
- 82.0 GLM-5.1
- 81.0 Gemini 2.5 Pro (snapshot unspecified)
- 80.0 Grok 4.20 (snapshot unspecified)
- 80.0 GLM-4.6
- 80.0
DeepSeek-V3.2
- 79.0 DeepSeek 3.1 (snapshot unspecified)
- 78.0 GLM-5-Turbo
- 67.0 Qwen 3 (snapshot unspecified)
- 1 GPT 5.0 (snapshot unspecified) 87%
- 2 GPT 5.3 (snapshot unspecified) 87%
- 3 Gemini 3 Flash (snapshot unspecified) 84%
- 4 GPT 4.1 (snapshot unspecified) 84%
- 5 Claude Opus 4.6 84%
- 6 Grok 4 83%
- 7 Claude Sonnet 4.6 83%
- 8
Qwen 3.6 Plus 83%
- 9 Gemini 3.1 Pro (snapshot unspecified) 82%
- 10 Claude Sonnet 4 82%
- 11 GLM-5.1 82%
- 12 Gemini 2.5 Pro (snapshot unspecified) 81%
- 13 Grok 4.20 (snapshot unspecified) 80%
- 14 GLM-4.6 80%
- 15
DeepSeek-V3.2 80%
- 16 DeepSeek 3.1 (snapshot unspecified) 79%
- 17 GLM-5-Turbo 78%
- 18 Qwen 3 (snapshot unspecified) 67%
Source: Official HelpBench leaderboard
- 1 Claude Opus 4.6 84%
- 2 Grok 4 83%
- 3 Claude Sonnet 4.6 83%
- 4
Qwen 3.6 Plus 83%
- 5 Claude Sonnet 4 82%
- 6 GLM-5.1 82%
- 7 GLM-4.6 80%
- 8
DeepSeek-V3.2 80%
- 9 GLM-5-Turbo 78%
- 10
Gemini 4 Argon 76.5%
Sources: Official HelpBench leaderboard and labs’ model cards
| # | Entry | Score | Setting | Date | Source |
|---|---|---|---|---|---|
| 1 | GPT 5.0 (snapshot unspecified) | 87% | Official leaderboard | ||
| 2 | GPT 5.3 (snapshot unspecified) | 87% | Official leaderboard | ||
| 3 | Gemini 3 Flash (snapshot unspecified) | 84% | Official leaderboard | ||
| 4 | GPT 4.1 (snapshot unspecified) | 84% | Official leaderboard | ||
| 5 | Claude Opus 4.6 | 84% | Feb 2026 | Official leaderboard | |
| 6 | Grok 4 | 83% | Jul 2025 | Official leaderboard | |
| 7 | Claude Sonnet 4.6 | 83% | Feb 2026 | Official leaderboard | |
| 8 | | 83% | Mar 2026 | Official leaderboard | |
| 9 | Gemini 3.1 Pro (snapshot unspecified) | 82% | Official leaderboard | ||
| 10 | Claude Sonnet 4 | 82% | May 2025 | Official leaderboard | |
| 11 | GLM-5.1 | 82% | Apr 2026 | Official leaderboard | |
| 12 | Gemini 2.5 Pro (snapshot unspecified) | 81% | Official leaderboard | ||
| 13 | Grok 4.20 (snapshot unspecified) | 80% | Official leaderboard | ||
| 14 | GLM-4.6 | 80% | Sep 2025 | Official leaderboard | |
| 15 | | 80% | Dec 2025 | Official leaderboard | |
| 16 | DeepSeek 3.1 (snapshot unspecified) | 79% | Official leaderboard | ||
| 17 | GLM-5-Turbo | 78% | Mar 2026 | Official leaderboard | |
| 18 | Qwen 3 (snapshot unspecified) | 67% | Official leaderboard |
| # | Model | Score | Setting | Date | Source |
|---|---|---|---|---|---|
| 1 | Claude Opus 4.6 | 84% | Feb 2026 | Official leaderboard | |
| 2 | Grok 4 | 83% | Jul 2025 | Official leaderboard | |
| 3 | Claude Sonnet 4.6 | 83% | Feb 2026 | Official leaderboard | |
| 4 | | 83% | Mar 2026 | Official leaderboard | |
| 5 | Claude Sonnet 4 | 82% | May 2025 | Official leaderboard | |
| 6 | GLM-5.1 | 82% | Apr 2026 | Official leaderboard | |
| 7 | GLM-4.6 | 80% | Sep 2025 | Official leaderboard | |
| 8 | | 80% | Dec 2025 | Official leaderboard | |
| 9 | GLM-5-Turbo | 78% | Mar 2026 | Official leaderboard | |
| 10 | | 76.5% | Oct 2026 | Lab model card |
Labs report scores for 1 model in their cards. Switch the scores above to rank them together.
Number one over time Number one over time
Lab claims count from the day the card came out, independent runs from the model’s release.
Source: Official HelpBench leaderboard
Scores over time
All the scores we have, one dot each, so a model tested at several settings appears more than once.
Sources: Official HelpBench leaderboard and labs’ model cards
Labs report it only in system cards
We read the headline results of 522 launch posts from 52 labs, and none of them list this benchmark. Some system cards do, below.
One system card reports it
Besides launch posts, we read the system cards, model cards and technical reports labs publish with a release. They report far more, including safety and frontier-risk tests.
| Date | Document | Score | As the document writes it | Section |
|---|---|---|---|---|
| Oct 13, 2026 | | 76.5 | Privacy, Safety & Security Advice (HelpBench, 450 questions), helpfulness total score 76.45%; positive rubric compliance 86.87%, negative rubric avoidance 67.48%, pitfall-free rate 47.78%, mean committed pitfalls 1.32 (Figures 5.17, 5.18) | Safety |
More in Safety and alignment
- FORTRESS In use Paired adversarial and benign national-security misuse prompts. Rubric-graded risk score on adversarial and over-refusal score on benign prompts. Claude Opus 5.5 5.78%
- StrongREJECT In use Forbidden-prompt jailbreak benchmark with a rubric grader that scores how useful a non-refusal actually is.
Inkling 98.6%
- Gray Swan IPI Arena benchmark In use Indirect prompt-injection attacks from public red-teaming competitions replayed on tool, coding and browser agents. Attack success rate at k attempts.
Gemini 4 Carbon 0%
- DistressBench In use Models reply as a chatbot to 718 simulated users in psychological crisis, in single-turn and multi-turn chats. Three judge models score replies against clinician-written rubrics.
Muse Spark 1.2 88.4%
- Lakera B3 (Backbone Breaker Benchmark) In use Crowdsourced prompt-injection attacks hit backbone LLMs inside agent threat snapshots at three defense levels. The score is attack resistance, 100 minus the board's vulnerability percentage. Claude Opus 4.5 89%
- IHEval In use Models face conflicts between system, user and tool instructions. Reports a composite score for following the higher-priority instruction. GPT-4o 70%