Cohere
Rank #38 of 93
Measured

Cohere Command R: LLM Security & Jailbreak Resistance

As of 2026-07-04, Cohere Command R has an attack success rate (ASR) of 32.9% on Guardion's LLM Vulnerability benchmark — ranking #38 of 93 models. It is moderately resistant — a meaningful share of adversarial prompts succeed.

Overall ASR
32.9%
lower is safer
Robustness
67.1%
100 − ASR
Rank
#38
of 93 models
Zero-Shot ASR
9.4%
TAP ASR
56.7%
Tree of Attacks w/ Pruning
Crescendo ASR
32.6%
multi-turn escalation

Attack Success Rate (ASR) is the share of adversarial prompts that elicit harmful output across zero-shot, TAP, and Crescendo attacks (HarmBench framework). Lower is safer. "Est." models are calibrated from public safety evaluations pending a Guardion benchmark run.

How Command R compares

Cohere Command R 7B
Rank #26 · ASR 25.8%
Compare
Cohere Command A
Rank #27 · ASR 26.0% (est.)
Compare
Cohere Command 2X
Rank #54 · ASR 39.4%
Compare
Cohere Command R Plus
Rank #68 · ASR 43.3%
Compare
Meta Llama 3-7 DS
Rank #37 · ASR 32.2%
Compare
xAI Grok-4 Fast Non-Reasoning
Rank #39 · ASR 33.0% (est.)
Compare

Frequently asked questions

How secure is Cohere Command R against jailbreaks?

Cohere Command R is moderately resistant — a meaningful share of adversarial prompts succeed. On Guardion's LLM Vulnerability benchmark it records a 32.9% attack success rate (67.1% robustness), ranking #38 of 93 models.

What is Command R's attack success rate (ASR)?

Command R's overall ASR is 32.9% — the share of adversarial prompts that elicit harmful output across zero-shot, TAP, and Crescendo attacks. Lower is safer.

Is Command R more secure than Command R 7B?

Command R 7B is more robust: 25.8% ASR vs Command R's 32.9%. See the full head-to-head comparison for the per-attack breakdown.

How can I make Command R safer to deploy?

Even robust models are bypassed under sustained attack. An inline runtime guardrail that classifies prompts and responses — like Guardion's prompt-defense models — blocks jailbreaks and prompt injection before they reach Command R.

Harden Command R in production

Guardion's runtime guardrails block jailbreaks and prompt injection before they reach any model — with sub-130ms policy decisions.

Request a demo