Alibaba
Rank #59 of 93
Measured

Alibaba Qwen QwQ 32B: LLM Security & Jailbreak Resistance

As of 2026-07-04, Alibaba Qwen QwQ 32B has an attack success rate (ASR) of 40.0% on Guardion's LLM Vulnerability benchmark — ranking #59 of 93 models. It is weakly resistant — adversarial prompts succeed often without added guardrails.

Overall ASR
40.0%
lower is safer
Robustness
60%
100 − ASR
Rank
#59
of 93 models
Zero-Shot ASR
5.3%
TAP ASR
73.9%
Tree of Attacks w/ Pruning
Crescendo ASR
40.9%
multi-turn escalation

Attack Success Rate (ASR) is the share of adversarial prompts that elicit harmful output across zero-shot, TAP, and Crescendo attacks (HarmBench framework). Lower is safer. "Est." models are calibrated from public safety evaluations pending a Guardion benchmark run.

How Qwen QwQ 32B compares

Alibaba Qwen 2.5 72B
Rank #28 · ASR 26.3%
Compare
Alibaba Qwen3-Max
Rank #31 · ASR 28.0% (est.)
Compare
Alibaba Qwen3-235B-A22B-Thinking
Rank #33 · ASR 30.0% (est.)
Compare
Alibaba Qwen3 VL 235B A22B Thinking
Rank #44 · ASR 34.0% (est.)
Compare
Alibaba Qwen 7-72BB
Rank #47 · ASR 36.5%
Compare
Alibaba Qwen3-Next-80B-A3B-Instruct
Rank #49 · ASR 37.0% (est.)
Compare

Frequently asked questions

How secure is Alibaba Qwen QwQ 32B against jailbreaks?

Alibaba Qwen QwQ 32B is weakly resistant — adversarial prompts succeed often without added guardrails. On Guardion's LLM Vulnerability benchmark it records a 40.0% attack success rate (60% robustness), ranking #59 of 93 models.

What is Qwen QwQ 32B's attack success rate (ASR)?

Qwen QwQ 32B's overall ASR is 40.0% — the share of adversarial prompts that elicit harmful output across zero-shot, TAP, and Crescendo attacks. Lower is safer.

Is Qwen QwQ 32B more secure than Qwen 2.5 72B?

Qwen 2.5 72B is more robust: 26.3% ASR vs Qwen QwQ 32B's 40.0%. See the full head-to-head comparison for the per-attack breakdown.

How can I make Qwen QwQ 32B safer to deploy?

Even robust models are bypassed under sustained attack. An inline runtime guardrail that classifies prompts and responses — like Guardion's prompt-defense models — blocks jailbreaks and prompt injection before they reach Qwen QwQ 32B.

Harden Qwen QwQ 32B in production

Guardion's runtime guardrails block jailbreaks and prompt injection before they reach any model — with sub-130ms policy decisions.

Request a demo