gpt-oss-safeguard-20b

<p align="center"> <img alt="gpt-oss-safeguard-20b" src="https://raw.githubusercontent.com/openai/gpt-oss-safeguard/refs/heads/main/docs/gpt-oss-safeguard-20b.png"> </p> <p align="center"> <a href="https://huggingface.co/spaces/openai/gpt-oss-safeguard-20b"><strong>Try gpt-oss-safeguard</strong></a> · <a href="https://cookbook.openai.com/articles/gpt-oss-safeguard-guide"><strong>Guide</strong></a> · <a href="https://arxiv.org/abs/2508.10925"><strong>Model card</strong></a> · <a href="https://openai.com/index/introducing-gpt-oss-safeguard/"><strong>OpenAI blog</strong></a> </p> <br>

gpt-oss-safeguard-120b and gpt-oss-safeguard-20b are safety reasoning models built-upon gpt-oss. With these models, you can classify text content based on safety policies that you provide and perform a suite of foundational safety tasks. These models are intended for safety use cases. For other applications, we recommend using gpt-oss models.

This model gpt-oss-safeguard-20b (21B parameters with 3.6B active parameters) fits into GPUs with 16GB of VRAM. Check out gpt-oss-safeguard-120b (117B parameters with 5.1B active parameters) for the larger model.

Both models were trained on our harmony response format and should only be used with the harmony format as it will not work correctly otherwise.

Highlights

• Trained to reason about safety : Trained and tuned for safety reasoning to accommodate use cases like LLM input-output filtering, online content labeling and offline labeling for Trust and Safety use cases.
• Bring your own policy: Interprets your written policy, so it generalizes across products and use cases with minimal engineering.
• Reasoned decisions, not just scores: Gain complete access to the model’s reasoning process, facilitating easier debugging and increased trust in policy decisions. Keep in mind Raw CoT is meant for developers and safety practitioners. It’s not intended for exposure to general users or use cases outside of safety contexts.
• Configurable reasoning effort: Easily adjust the reasoning effort (low, medium, high) based on your specific use case and latency needs.
• Permissive Apache 2.0 license: Build freely without copyleft restrictions or patent risk—ideal for experimentation, customization, and commercial deployment.

Inference examples

You can use gpt-oss-safeguard-120b and gpt-oss-safeguard-20b similar to gpt-oss-120b and gpt-oss-20b as described in our respective cookbooks. We’ve also provided a detailed prompting guide that provides guidelines for how to craft your policy and use it with the models.

Download the model

To download the model weights from Hugging Face hub using similar instructions to gpt-oss-120b.

Join the ROOST Model Community

gpt-oss-safeguard is a model partner of the Robust Open Online Safety Tools (ROOST) Model Community. The ROOST Model Community (RMC) is a group of safety practitioners exploring open source AI models to protect online spaces. As an RMC model partner, OpenAI is committed to incorporating user feedback and jointly iterating on future releases in pursuit of open safety. Visit the RMC GitHub repo to learn more about this partnership and how to get involved.

Resources

• Try gpt-oss-safeguard
• OpenAI blog