Back to Models

GPT OSS Safeguard 120B

openaiopenai/gpt-oss-safeguard-120b

OpenAI's advanced safety reasoning model (120B). Nuanced policy interpretation, multi-turn safety analysis, and justified decisions for content moderation.

GPT OSS Safeguard 120B is OpenAI's first open-weight safety reasoning model, released in October 2025 as a research preview under the Apache 2.0 license. It is a fine-tuned variant of gpt-oss-120b β€” a 117B-parameter MoE transformer (5.1B active per forward pass) β€” specialized for policy-based content classification. Instead of learning a decision boundary from labelled examples like traditional moderation models, Safeguard reasons directly from a developer-provided policy at inference time, using chain-of-thought to produce explainable classifications.

In production, GPT OSS Safeguard 120B fills the role of a flexible, reasoning-based content moderation layer. Developers provide their own policies at inference time β€” for example, a gaming forum's anti-cheating rules or a review platform's fake-review policy β€” and the model classifies each input against those policies while outputting its reasoning. It excels in evolving-risk domains where policies must adapt quickly, nuanced scenarios where traditional classifiers struggle, and situations where explainable moderation decisions matter. According to OpenAI's internal evaluations, the safeguard model outperforms gpt-5-thinking on multi-policy accuracy despite being substantially smaller.

Best for
  • β€’ Custom policy-based content moderation β€” bring your own rules for classifying user-generated content.
  • β€’ Evolving-risk domains β€” update policies at inference time without retraining classifiers.
  • β€’ Explainable moderation β€” chain-of-thought reasoning provides auditable justification for each classification decision.
  • β€’ Self-hosted safety pipelines β€” deploy on-premises on a single 80GB GPU with full data sovereignty.
  • β€’ Multi-policy classification β€” evaluate content against multiple policies simultaneously in a single inference call.
Reach for something else if
  • β€’ High-throughput moderation at scale β€” the reasoning-based approach is compute-intensive and slower than lightweight classifiers. Use traditional moderation models for bulk classification.
  • β€’ Low-latency / real-time filtering β€” gpt-oss-safeguard-20b is the lighter alternative; even faster pre-filtering with dedicated classifiers is recommended.
  • β€’ High-data domains with stable policies β€” traditional classifiers trained on tens of thousands of high-quality samples can outperform the reasoning-based approach on well-understood risk categories.
Context Length
128K
Max Output
16K
Input Priceper 1M tokens
$0.162/ 1M tokens
Output Priceper 1M tokens
$0.648/ 1M tokens

Modalities

text→text

Pricing Breakdown

TypeRate
Input$0.162 / 1M tokens
Output$0.648 / 1M tokens

Supported Parameters

temperaturemax_tokenstop_presponse_formatstop

Specifications

Release date2025-10-29 (research preview)openai.com β†—verified
Base modelgpt-oss-120b β€” MoE Transformer (116.8B total / 5.1B active per token)arxiv.org β†—verified
LicenseApache 2.0openai.com β†—verified
ArchitectureMoE Transformer β€” 36 layers, 128 experts, top-4 active, 116.8B total / 5.1B active paramsarxiv.org β†—verified
Context window128K tokensopenai.com β†—verified
Tokenizero200k_harmony (201,088 tokens)arxiv.org β†—verified
QuantizationMXFP4 (4.25 bits/param on MoE weights)arxiv.org β†—verified
Model purposePolicy-based safety classification with deliberative reasoningopenai.com β†—verified
LimitationDedicated classifiers with large labelled datasets may still outperform on well-studied risk categoriesopenai.com β†—verified

Benchmarks

BenchmarkDistributionScoreSource
Multi-policy accuracy (internal)
Outperformed gpt-5-thinking and base gpt-oss models on simultaneous multi-policy classification (internal evaluation).
Best among tested modelsopenai.com β†—
2022 Moderation eval (internal policy)
Slightly outperformed all tested models including internal Safety Reasoner and gpt-5-thinking (difference not statistically significant).
~95.7%openai.com β†—
ToxicChat
Safety Reasoner and gpt-5-thinking marginally outperform gpt-oss-safeguard-120b; small size still advantageous for this task type.
Comparable to Safety Reasoner / gpt-5-thinkingopenai.com β†—

API Usage Examples

Use the global api.therouter.ai endpoint shown below for new integrations; the legacy China accelerated endpoint is retired.

cURL
curl https://api.therouter.ai/v1/chat/completions   -H "Content-Type: application/json"   -H "Authorization: Bearer $THE_ROUTER_API_KEY"   -d '{
    "model": "openai/gpt-oss-safeguard-120b",
    "messages": [
      {"role": "user", "content": "Summarize the key points from this input."}
    ]
  }'

Chat completion

Use standard OpenAI-compatible chat completion via TheRouter. The model accepts a policy in the system or developer message and classifies the input content accordingly.

cURL
curl https://api.therouter.ai/v1/chat/completions \
  -H "Authorization: Bearer $THEROUTER_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "openai/gpt-oss-safeguard-120b",
    "messages": [
      {"role": "system", "content": "You are a safety classifier. Apply the policy faithfully."},
      {"role": "developer", "content": "Policy: Classify messages as SAFE or UNSAFE. UNSAFE includes hate speech, harassment, and spam. SAFE includes all other content."},
      {"role": "user", "content": "I love this product! It works great."}
    ]
  }'

More from openai

Similar models

Cross-provider sibling models

News & changes

2025-10-29

OpenAI releases gpt-oss-safeguard β€” open-weight safety reasoning models

OpenAI released gpt-oss-safeguard-120b and gpt-oss-safeguard-20b, research preview open-weight models for policy-based safety classification. The models use chain-of-thought reasoning to interpret developer-defined policies at inference time, supporting evolving-risk domains and multi-policy classification. Available under Apache 2.0 license.

re-authored by TheRouteropenai.com β†—

Frequently asked

How is gpt-oss-safeguard-120b different from OpenAI's Moderation API?

The Moderation API uses traditional classifiers trained on labelled examples under pre-defined policies. gpt-oss-safeguard uses reasoning to interpret a developer-provided policy at inference time, producing explainable classifications through chain-of-thought. This makes it more flexible for evolving policies, nuanced domains, and custom policy definitions β€” but slower and more compute-intensive.

re-authored by TheRouteropenai.com β†—
Can TheRouter hosts gpt-oss-safeguard-120b so I don't need to self-host?

Yes. gpt-oss-safeguard-120b is listed on TheRouter and accessible via the standard OpenAI-compatible API at https://api.therouter.ai/v1 with model id openai/gpt-oss-safeguard-120b. You can use it without managing your own GPU hardware.

re-authored by TheRouteropenai.com β†—
Fact ledger β€” every claim on this page traces here
sourceURLretrieved
Release dateopenai.com β†—2026-05-29verified
Base modelarxiv.org β†—2026-05-29verified
Licenseopenai.com β†—2026-05-29verified
Architecturearxiv.org β†—2026-05-29verified
Context windowopenai.com β†—2026-05-29verified
Tokenizerarxiv.org β†—2026-05-29verified
Quantizationarxiv.org β†—2026-05-29verified
Model purposeopenai.com β†—2026-05-29verified
Limitationopenai.com β†—2026-05-29verified
Multi-policy accuracy (internal)openai.com β†—2026-05-29verified
2022 Moderation eval (internal policy)openai.com β†—2026-05-29to verify
ToxicChatopenai.com β†—2026-05-29to verify
OpenAI releases gpt-oss-safeguard β€” open-weight safety reasoning modelsopenai.com β†—2026-05-29verified
How is gpt-oss-safeguard-120b different from OpenAI's Moderation API?openai.com β†—2026-05-29to verify
Can TheRouter hosts gpt-oss-safeguard-120b so I don't need to self-host?openai.com β†—2026-05-29to verify
Help & contact