MiniMax MiniMax M2 vs Alibaba Qwen3 VL 235B A22B Instruct

Detailed comparison for LLMs

MiniMaxAlibaba

MiniMax MiniMax M2 and Alibaba Qwen3 VL 235B A22B Instruct are evenly matched at about 40.0% attack success rate (ASR) on Guardion's LLM vulnerability Benchmark. One or both scores are estimated from public safety evaluations pending a Guardion benchmark run.

Head-to-Head Overview

It's a close match between MiniMax M2 and Qwen3 VL 235B A22B Instruct!

Attack Success Rate (lower is safer)

ASR for MiniMax MiniMax M2 vs Alibaba Qwen3 VL 235B A22B Instruct. Green marks the safer model on each metric. Only the overall score is available for estimated models.

Overall (ASR)

MiniMax M2
40.0%
Qwen3 VL 235B A22B Instruct
40.0%

TAP Attack Method (ASR)

MiniMax M2
100.0%
Qwen3 VL 235B A22B Instruct
100.0%

Crescendo Attack Method (ASR)

MiniMax M2
100.0%
Qwen3 VL 235B A22B Instruct
100.0%

Zero-Shot (ASR)

MiniMax M2
100.0%
Qwen3 VL 235B A22B Instruct
100.0%

Key Highlights

No specific highlights generated for this comparison.

Security Profile

Outward is better on every axis.

OverallTAPCrescendoZero-Shot
MiniMax M2
Qwen3 VL 235B A22B Instruct
Full security profile
MiniMax MiniMax M2
Full security profile
Alibaba Qwen3 VL 235B A22B Instruct

Frequently asked questions

Is MiniMax MiniMax M2 or Alibaba Qwen3 VL 235B A22B Instruct more secure?

MiniMax MiniMax M2 and Alibaba Qwen3 VL 235B A22B Instruct are evenly matched at about 40.0% attack success rate (ASR) on Guardion's LLM vulnerability Benchmark. One or both scores are estimated from public safety evaluations pending a Guardion benchmark run.

What is the attack success rate (ASR) of MiniMax M2 vs Qwen3 VL 235B A22B Instruct?

MiniMax M2 has a 40.0% ASR and Qwen3 VL 235B A22B Instruct has a 40.0% ASR — the share of adversarial prompts that succeed across zero-shot, TAP, and Crescendo attacks. Lower is safer.

How were MiniMax M2 and Qwen3 VL 235B A22B Instruct tested?

Both were red-teamed with the HarmBench framework across zero-shot, TAP (Tree of Attacks with Pruning), and Crescendo multi-turn attacks, scored by Attack Success Rate.

Related Comparisons