As of 2026-07-04, Cohere Command 2X has an attack success rate (ASR) of 39.4% on Guardion's LLM Vulnerability benchmark — ranking #54 of 93 models. It is weakly resistant — adversarial prompts succeed often without added guardrails.
Attack Success Rate (ASR) is the share of adversarial prompts that elicit harmful output across zero-shot, TAP, and Crescendo attacks (HarmBench framework). Lower is safer. "Est." models are calibrated from public safety evaluations pending a Guardion benchmark run.
Cohere Command 2X is weakly resistant — adversarial prompts succeed often without added guardrails. On Guardion's LLM Vulnerability benchmark it records a 39.4% attack success rate (60.6% robustness), ranking #54 of 93 models.
Command 2X's overall ASR is 39.4% — the share of adversarial prompts that elicit harmful output across zero-shot, TAP, and Crescendo attacks. Lower is safer.
Command R 7B is more robust: 25.8% ASR vs Command 2X's 39.4%. See the full head-to-head comparison for the per-attack breakdown.
Even robust models are bypassed under sustained attack. An inline runtime guardrail that classifies prompts and responses — like Guardion's prompt-defense models — blocks jailbreaks and prompt injection before they reach Command 2X.
Guardion's runtime guardrails block jailbreaks and prompt injection before they reach any model — with sub-130ms policy decisions.
Request a demo