CASI and ARS Leaderboards
The F5 Labs AI Security Leaderboard compares leading AI models based on comprehensive security and performance metrics, providing insights into model safety, reliability, and operational excellence. Learn about the methodology
Model Security Trends
Each line is a provider’s highest-scoring model in that month’s top ten. A gap means the provider did not place.
Anthropic
OpenAI
NVIDIA
xAI
Qwen
All Others
Get AI leaderboard insights in your inbox
The latest updates on model performance, rankings, and emerging trends
SubscribeLeaderboard rankings
How the AI Leaderboard worksLeaderboard:
| 1▲ | Claude Sonnet 5 | 97.60▲ | 23.20%▲ | 0.68 | 12.30 | |
| 2— | GPT-5.4 | 95.76— | 18.20%— | 0.65 | 18.27 | |
| 3▲ | Claude Opus 5 | 94.75▲ | 57.60%▲ | 0.80 | 25.33 | |
| 4— | GPT-5.2 | 94.33— | 17.00%— | 0.63 | 16.70 | |
| 5▲ | GPT-5.4 Nano | 93.95▲ | 11.70%▲ | 0.61 | 1.54 | |
| 6— | GPT-6 Luna | 93.52— | 9.00%— | 0.60 | 0.00 | |
| 7— | Grok 4.7 High | 93.46— | 46.40%— | 0.75 | 8.56 | |
| 8— | Claude Opus 5.5 Reasoning | 93.06— | 29.10%— | 0.67 | 32.24 | |
| 9— | Claude Fable 5.1 Max Effort | 92.99— | 53.40%— | 0.77 | 64.52 | |
| 10▼ | Nemotron-3 Ultra | 91.13▼ | 22.90%▼ | 0.64 | 3.40 |
Top 10 models
Frequently asked questions
CASI (Comprehensive AI Security Index) measures how vulnerable a model is to common prompt injection and jailbreak attacks. It evaluates how easily an LLM can be manipulated into producing harmful or policy-violating outputs.
Stay up to date with F5 Labs
Get the latest threat intelligence and research delivered to your inbox.