# WildGuardTest (Decision Index) leaderboard

external benchmark

> Every figure below is reproduced as its upstream source published it: nothing is modelled, estimated, interpolated or converted. `Unavailable` means no source published the value — it is never a zero. Each value carries its evidence state and the date it was observed.

Page: https://modelscale.dev/leaderboards/benchmarks/external-aa-decision-wild-guard-test

Every model the catalog carries a published WildGuardTest (Decision Index) value for, ranked by that value.

## Benchmark record

| Field | Value |
| --- | --- |
| Category | external |
| Measure | Average F1 |
| Tasks | — |
| Difficulty | Safety classification |
| Published by | [Artificial Analysis Decision Index v1.0](https://artificialanalysis.ai/articles/artificial-analysis-decision-index) |

WildGuardTest is one component of the Artificial Analysis Decision Index v1.0, run by Artificial Analysis. It measures average F1 on Ai2's safety classification set: whether a request is harmful, whether a reply is a refusal, and whether that reply is harmful.

## WildGuardTest (Decision Index) ranking

13 models with a published WildGuardTest (Decision Index) value, ordered by that value, highest first. Models the source has not scored on this benchmark are not listed — they are unmeasured, not last.

| Rank | Model | Provider | Average F1 | Evidence |
| --- | --- | --- | --- | --- |
| 1 | [d1-ultra](https://modelscale.dev/models/d1-ultra) | Liquid AI | 95.4 | Observed 2026-10-23 · source benchlm:models |
| 2 | [GLiDE](https://modelscale.dev/models/fastino-glide) | Fastino | 95.1 | Observed 2026-10-23 · source benchlm:models |
| 3 | [Perplexity Decider v1.2 27B](https://modelscale.dev/models/pplx-decider-v1-2) | Perplexity | 94.4 | Observed 2026-10-23 · source benchlm:models |
| 4 | [Celeris-1 Decision](https://modelscale.dev/models/celeris-1-decision) | Celeris | 93.3 | Observed 2026-10-23 · source benchlm:models |
| 4 | [elephant-1](https://modelscale.dev/models/elephant-1) | Baseten | 93.3 | Observed 2026-10-23 · source benchlm:models |
| 4 | [Perplexity Decider Flash v1.2 4B](https://modelscale.dev/models/pplx-decider-flash-v1-2) | Perplexity | 93.3 | Observed 2026-10-23 · source benchlm:models |
| 7 | [Jev 1.14](https://modelscale.dev/models/jev-1-14) | TypeSafe AI | 93.1 | Observed 2026-10-23 · source benchlm:models |
| 8 | [Clef-Flash](https://modelscale.dev/models/cloudflare-clef-flash) | Cloudflare | 90.9 | Observed 2026-10-23 · source benchlm:models |
| 8 | [d1](https://modelscale.dev/models/liquid-d1) | Liquid AI | 90.9 | Observed 2026-10-23 · source benchlm:models |
| 10 | [Clef](https://modelscale.dev/models/cloudflare-clef) | Cloudflare | 90.7 | Observed 2026-10-23 · source benchlm:models |
| 11 | [Microsoft-Decision-1](https://modelscale.dev/models/microsoft-decision-1) | Microsoft | 88.2 | Observed 2026-10-23 · source benchlm:models |
| 12 | [Mercury Decide](https://modelscale.dev/models/mercury-decide) | Inception | 88.0 | Observed 2026-10-23 · source benchlm:models |
| 13 | [Clef-Omni](https://modelscale.dev/models/cloudflare-clef-omni) | Cloudflare | 87.2 | Observed 2026-10-23 · source benchlm:models |

Rows are ordered by the value the source published, highest first. The source does not state whether a higher value is the better result, so this document does not either: for a benchmark that measures a rate of failure, read the table from the bottom.