DeepSeek
Rank #81 of 93
Est.

DeepSeek DeepSeek R1 Distill Llama 8B: LLM Security & Jailbreak Resistance

As of 2026-07-04, DeepSeek DeepSeek R1 Distill Llama 8B has an attack success rate (ASR) of 48.0% on Guardion's LLM Vulnerability benchmark — ranking #81 of 93 models. It is weakly resistant — adversarial prompts succeed often without added guardrails.

Overall ASR
48.0%
lower is safer
Robustness
52%
100 − ASR
Rank
#81
of 93 models
Zero-Shot ASR
100.0%
TAP ASR
100.0%
Tree of Attacks w/ Pruning
Crescendo ASR
100.0%
multi-turn escalation

Attack Success Rate (ASR) is the share of adversarial prompts that elicit harmful output across zero-shot, TAP, and Crescendo attacks (HarmBench framework). Lower is safer. "Est." models are calibrated from public safety evaluations pending a Guardion benchmark run.

How DeepSeek R1 Distill Llama 8B compares

DeepSeek DeepSeek-R1-0528
Rank #61 · ASR 41.0% (est.)
Compare
DeepSeek DeepSeek-V3.2 Thinking
Rank #62 · ASR 42.0% (est.)
Compare
DeepSeek DeepSeek-V3.2-Speciale
Rank #73 · ASR 45.0% (est.)
Compare
DeepSeek DeepSeek-V3.2-Exp
Rank #77 · ASR 46.0% (est.)
Compare
DeepSeek DeepSeek-V3.2 Non-thinking
Rank #79 · ASR 47.0% (est.)
Compare
DeepSeek DeepSeek VL2
Rank #87 · ASR 52.0% (est.)
Compare

Frequently asked questions

How secure is DeepSeek DeepSeek R1 Distill Llama 8B against jailbreaks?

DeepSeek DeepSeek R1 Distill Llama 8B is weakly resistant — adversarial prompts succeed often without added guardrails. On Guardion's LLM Vulnerability benchmark it records a 48.0% attack success rate (52% robustness), ranking #81 of 93 models (estimated from public safety evaluations).

What is DeepSeek R1 Distill Llama 8B's attack success rate (ASR)?

DeepSeek R1 Distill Llama 8B's overall ASR is 48.0% — the share of adversarial prompts that elicit harmful output across zero-shot, TAP, and Crescendo attacks. Lower is safer.

Is DeepSeek R1 Distill Llama 8B more secure than DeepSeek-R1-0528?

DeepSeek-R1-0528 is more robust: 41.0% ASR vs DeepSeek R1 Distill Llama 8B's 48.0%. See the full head-to-head comparison for the per-attack breakdown.

How can I make DeepSeek R1 Distill Llama 8B safer to deploy?

Even robust models are bypassed under sustained attack. An inline runtime guardrail that classifies prompts and responses — like Guardion's prompt-defense models — blocks jailbreaks and prompt injection before they reach DeepSeek R1 Distill Llama 8B.

Harden DeepSeek R1 Distill Llama 8B in production

Guardion's runtime guardrails block jailbreaks and prompt injection before they reach any model — with sub-130ms policy decisions.

Request a demo