Alibaba Qwen3 VL 235B A22B Thinking vs Amazon Nova Premier

Detailed comparison for LLMs

AlibabaAmazon

On Guardion's LLM vulnerability Benchmark, Amazon Nova Premier is the more secure of the two: Qwen3 VL 235B A22B Thinking scores 34.0% and Nova Premier scores 20.0% on attack success rate (ASR) (lower is better). One or both scores are estimated from public safety evaluations pending a Guardion benchmark run.

Head-to-Head Overview

Nova Premier is the overall winner in this comparison!

Attack Success Rate (lower is safer)

ASR for Alibaba Qwen3 VL 235B A22B Thinking vs Amazon Nova Premier. Green marks the safer model on each metric. Only the overall score is available for estimated models.

Overall (ASR)

Qwen3 VL 235B A22B Thinking
34.0%
Nova Premier
20.0%

TAP Attack Method (ASR)

Qwen3 VL 235B A22B Thinking
100.0%
Nova Premier

Crescendo Attack Method (ASR)

Qwen3 VL 235B A22B Thinking
100.0%
Nova Premier

Zero-Shot (ASR)

Qwen3 VL 235B A22B Thinking
100.0%
Nova Premier

Key Highlights

  • Amazon Nova Premier has a lower Overall (ASR).

Security Profile

Outward is better on every axis.

OverallTAPCrescendoZero-Shot
Qwen3 VL 235B A22B Thinking
Nova Premier
Full security profile
Alibaba Qwen3 VL 235B A22B Thinking
Full security profile
Amazon Nova Premier

Frequently asked questions

Is Alibaba Qwen3 VL 235B A22B Thinking or Amazon Nova Premier more secure?

On Guardion's LLM vulnerability Benchmark, Amazon Nova Premier is the more secure of the two: Qwen3 VL 235B A22B Thinking scores 34.0% and Nova Premier scores 20.0% on attack success rate (ASR) (lower is better). One or both scores are estimated from public safety evaluations pending a Guardion benchmark run.

What is the attack success rate (ASR) of Qwen3 VL 235B A22B Thinking vs Nova Premier?

Qwen3 VL 235B A22B Thinking has a 34.0% ASR and Nova Premier has a 20.0% ASR — the share of adversarial prompts that succeed across zero-shot, TAP, and Crescendo attacks. Lower is safer.

How were Qwen3 VL 235B A22B Thinking and Nova Premier tested?

Both were red-teamed with the HarmBench framework across zero-shot, TAP (Tree of Attacks with Pruning), and Crescendo multi-turn attacks, scored by Attack Success Rate.

Related Comparisons