AI Policy Wiki
Dashboard
⚲

Gemini 2.5 Technical Report (Google, July 2025)

medium confidence · updated 2026-09-19

Google's technical report on the Gemini 2.X model family — Gemini 2.5 Pro and 2.5 Flash, with Gemini 2.0 Flash and Flash-Lite — first posted to arXiv on July 7, 2025 (arXiv 2507.06261). Covers architecture, training infrastructure, thinking, benchmark tables against Gemini 1.5 and against OpenAI, Anthropic, xAI and DeepSeek models, audio and video evaluations, safety and security evaluations, memorization, and a Frontier Safety Framework assessment in which Gemini 2.5 Pro reached the cyber-uplift alert threshold but no critical capability level.

"Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilities" is a technical report by the Gemini Team at Google, first posted to arXiv on July 7, 2025 and last revised on December 19, 2025 (version 6, summarised here) (Source: https://arxiv.org/abs/2507.06261). It introduces what it calls the Gemini 2.X model family: Gemini 2.5 Pro and Gemini 2.5 Flash, together with the earlier Gemini 2.0 Flash and Flash-Lite. The shorter Gemini 2.5 Pro model card refers readers to this report for detail. Most of the document's length is its contributor list.

Models, architecture and training

The report describes the Gemini 2.5 models as sparse mixture-of-experts transformers with native multimodal support for text, vision and audio input. Per its Table 1, Gemini 2.5 Pro and Flash accept text, image, video and audio with a 1M-token input length, produce up to 64K tokens of output, have a knowledge cutoff of January 2025, support tool use, and use "dynamic" thinking; the Gemini 2.0 models have an 8K output length and a June 2024 cutoff. Parameter counts are not given. Pre-training data is described as publicly available web documents, code, images, audio and video, with improved filtering and deduplication relative to Gemini 1.5; post-training uses vetted instruction-tuning, human-preference and tool-use data, with more training compute allocated to reinforcement learning and a focus on verifiable and model-based generative rewards.

The training-infrastructure section reports that the models were trained on TPUv5p accelerators across multiple datacenters, with slice-granularity elasticity, under which training continues at around 97% throughput while a failed slice recovers, and split-phase detection of silent data corruption; 93.4% of the run's time was spent on TPU computation. The thinking section states that the models are trained with reinforcement learning to use additional inference-time compute and can spend "tens of thousands of forward passes" before responding, with a controllable thinking budget. The report also describes Gemini 2.5 Pro Deep Think, a parallel-thinking approach announced at Google I/O and released experimentally to trusted testers in June 2025, without scores.

Capability evaluation

The methodology section states that all Gemini scores are pass@1 in a "single attempt" setting unless marked, run through the AI Studio API with default sampling, and that results for other developers' models are the providers' self-reported numbers unless stated; it cautions that SWE-bench Verified numbers across providers "aren't directly comparable" because scaffolds differ. Google describes n-gram, semantic-similarity and model-based decontamination, and continues to report an internal non-public benchmark, HiddenMath.

Table 3 compares six Gemini models (1.5 Flash and Pro, 2.0 Flash-Lite and Flash, 2.5 Flash and Pro) on LiveCodeBench, Aider Polyglot, SWE-bench Verified (single and multiple attempts), GPQA diamond, Humanity's Last Exam, SimpleQA, FACTS Grounding, Global MMLU (Lite), ECLeKTic, AIME 2025, HiddenMath-Hard, LOFT, MRCR-V2 (8-needle), MMMU, Vibe-Eval, ZeroBench and BetterChartQA. Table 4 compares Gemini 2.5 Pro with OpenAI o3 and o4-mini at high reasoning, Claude Sonnet 4 and Opus 4, Grok 3 Beta with extended thinking, and DeepSeek R1 0528. The report states that Gemini 2.5 Pro achieves the highest score among those models on Aider Polyglot, Humanity's Last Exam, GPQA diamond, SimpleQA and FACTS Grounding, and on LOFT and MRCR at 128k context, and that it is the only model in the table supporting context lengths of 1M tokens or more; in the same table the Claude models are higher on SWE-bench Verified, o4-mini on AIME 2025 and LiveCodeBench, and o3 on MMMU. Tables 5 and 6 report audio (FLEURS, CoVoST2) and video (fourteen benchmark settings including VideoMME, VideoMMMU and LVBench) results against GPT-4o audio models and GPT-4.1, which Google ran itself with the same prompts and inputs. The report also states that Gemini Deep Research, built on Gemini 2.5 Pro, rose on Humanity's Last Exam from 7.95% in December 2024 to 26.9%, and 32.4% with higher compute, in June 2025. A case study describes Gemini 2.5 Pro playing Pokémon Blue through an agent harness on a Twitch stream set up by an independent developer, Joel Zhang, and the failure modes observed.

Safety, security and memorization

Automated safety evaluations are reported as changes relative to Gemini 1.5 baselines (Table 7). Google states that the 2.0 models were substantially safer than 1.5 but over-refused benign requests, and that Gemini 2.5 was trained to reduce such refusals; for Gemini 2.5 Pro against Gemini 1.5 Pro 002 it reports fewer text-to-text policy violations, more image-to-text violations marked as not egregious, and gains in tone and in helpfulness and instruction following. Automated red teaming, framed as a multi-agent game between Gemini attackers and the target model, found dangerous-content policy violations falling from 43.5% for Gemini 1.5 Pro 002 to 24.3% for Gemini 2.5 Pro and helpfulness violations from 8.9% to 6.1% (Table 8). For indirect prompt injection, the report gives best attack success rates over 500 held-out scenarios for three attack methods (Actor Critic, Beam Search and Tree of Attacks with Pruning); Gemini 2.5 Flash and Pro were more resilient than their 1.5 baselines on all three after adversarial training, while the report notes that Gemini 2.5 Pro "is still less resilient compared to Gemini 2.5 Flash" (Table 9).

On memorization, Google sampled over 700,000 training documents and found the 2.X family memorizes long-form text at a much lower rate than earlier models, with no personal information observed in outputs classified as memorized. A divergence attack succeeded roughly 69% of the time against the 2.0 models and 59% against the 2.5 family, with about 0.2% of diverged text classified as memorization.

Frontier Safety Framework

Gemini 2.5 Pro was evaluated against the critical capability levels (CCLs) in Google's Frontier Safety Framework for CBRN, cybersecurity, machine learning R&D and deceptive alignment, and the report concludes that no CCL was reached. The evaluations "did reach an alert threshold for the Cyber Uplift 1 CCL", and Google says it put in place a response plan of more frequent cyber testing and accelerated mitigations. Reported results include solve counts on an autonomous cyber offense suite and on a new "key skills" benchmark of 48 challenges, where Gemini 2.5 Pro solved 6 of 12 hard challenges; RE-Bench, where the best agent solutions scored between 50% and 125% of the best expert-written solutions and the alert threshold, set above human performance, was not reached; and deceptive-alignment evaluations run on Gemini 2.5 Pro Preview 03-25, in which the model solved 2 of 5 stealth and 2 of 11 situational-awareness challenges. CBRN multiple-choice results (SecureBio VMQA, LAB-Bench subsets and WMDP) are shown only as a chart. External safety testing covered an early version, Gemini 2.5 Pro Preview 05-06, with findings reported qualitatively; the Flash models were not externally tested.

Reported results

Evaluation results the document states for which there is no separate benchmark page; results on benchmarks that have a page are recorded there and cite this page. Scores and settings are as printed in the document.

EvaluationModelScoreSettingSection
FACTS GroundingGemini 1.5 Flash82.9%sourced from the Kaggle FACTS Grounding leaderboard; pass@1, AI Studio API model id gemini-1.5-flash-002, default sampling; developer-reported3.2 (Table 3)
FACTS GroundingGemini 1.5 Pro80.0%sourced from the Kaggle FACTS Grounding leaderboard; pass@1, AI Studio API model id gemini-1.5-pro-002, default sampling; developer-reported3.2 (Table 3)
FACTS GroundingGemini 2.0 Flash-Lite82.4%sourced from the Kaggle FACTS Grounding leaderboard; pass@1, AI Studio API model id gemini-2.0-flash-lite-001, default sampling; developer-reported3.2 (Table 3)
FACTS GroundingGemini 2.0 Flash84.6%sourced from the Kaggle FACTS Grounding leaderboard; pass@1, AI Studio API model id gemini-2.0-flash-001, default sampling; developer-reported3.2 (Table 3)
FACTS GroundingGemini 2.5 Flash85.3%sourced from the Kaggle FACTS Grounding leaderboard; pass@1, AI Studio API model id gemini-2.5-flash, default sampling; developer-reported3.2 (Table 3)
FACTS GroundingGemini 2.5 Pro87.8%sourced from the Kaggle FACTS Grounding leaderboard; pass@1, AI Studio API model id gemini-2.5-pro, default sampling; developer-reported3.2 (Table 3)
FACTS GroundingOpenAI o3 (high)69.9%reported by Google in the Gemini 2.5 technical report; sourced from the Kaggle FACTS Grounding leaderboard3.3 (Table 4)
FACTS GroundingOpenAI o4-mini (high)62.1%reported by Google in the Gemini 2.5 technical report; sourced from the Kaggle FACTS Grounding leaderboard3.3 (Table 4)
FACTS GroundingClaude Sonnet 479.1%reported by Google in the Gemini 2.5 technical report; sourced from the Kaggle FACTS Grounding leaderboard3.3 (Table 4)
FACTS GroundingClaude Opus 477.7%reported by Google in the Gemini 2.5 technical report; sourced from the Kaggle FACTS Grounding leaderboard3.3 (Table 4)
FACTS GroundingGrok 3 Beta (Extended Thinking)74.8%reported by Google in the Gemini 2.5 technical report; sourced from the Kaggle FACTS Grounding leaderboard3.3 (Table 4)
FACTS GroundingDeepSeek R1 052882.4%reported by Google in the Gemini 2.5 technical report; sourced from the Kaggle FACTS Grounding leaderboard3.3 (Table 4)
Global MMLU (Lite)Gemini 1.5 Flash72.5%15 languages; 200 culturally sensitive and 200 culturally agnostic samples per language; pass@1, AI Studio API model id gemini-1.5-flash-002, default sampling; developer-reported3.2 (Table 3)
Global MMLU (Lite)Gemini 1.5 Pro80.8%15 languages; 200 culturally sensitive and 200 culturally agnostic samples per language; pass@1, AI Studio API model id gemini-1.5-pro-002, default sampling; developer-reported3.2 (Table 3)
Global MMLU (Lite)Gemini 2.0 Flash-Lite78.0%15 languages; 200 culturally sensitive and 200 culturally agnostic samples per language; pass@1, AI Studio API model id gemini-2.0-flash-lite-001, default sampling; developer-reported3.2 (Table 3)
Global MMLU (Lite)Gemini 2.0 Flash83.4%15 languages; 200 culturally sensitive and 200 culturally agnostic samples per language; pass@1, AI Studio API model id gemini-2.0-flash-001, default sampling; developer-reported3.2 (Table 3)
Global MMLU (Lite)Gemini 2.5 Flash88.4%15 languages; 200 culturally sensitive and 200 culturally agnostic samples per language; pass@1, AI Studio API model id gemini-2.5-flash, default sampling; developer-reported3.2 (Table 3)
Global MMLU (Lite)Gemini 2.5 Pro89.2%15 languages; 200 culturally sensitive and 200 culturally agnostic samples per language; pass@1, AI Studio API model id gemini-2.5-pro, default sampling; developer-reported3.2 (Table 3)
ECLeKTicGemini 1.5 Flash16.4%closed-book cross-lingual knowledge transfer QA; pass@1, AI Studio API model id gemini-1.5-flash-002, default sampling; developer-reported3.2 (Table 3)
ECLeKTicGemini 1.5 Pro27.0%closed-book cross-lingual knowledge transfer QA; pass@1, AI Studio API model id gemini-1.5-pro-002, default sampling; developer-reported3.2 (Table 3)
ECLeKTicGemini 2.0 Flash-Lite27.7%closed-book cross-lingual knowledge transfer QA; pass@1, AI Studio API model id gemini-2.0-flash-lite-001, default sampling; developer-reported3.2 (Table 3)
ECLeKTicGemini 2.0 Flash33.6%closed-book cross-lingual knowledge transfer QA; pass@1, AI Studio API model id gemini-2.0-flash-001, default sampling; developer-reported3.2 (Table 3)
ECLeKTicGemini 2.5 Flash36.8%closed-book cross-lingual knowledge transfer QA; pass@1, AI Studio API model id gemini-2.5-flash, default sampling; developer-reported3.2 (Table 3)
ECLeKTicGemini 2.5 Pro46.8%closed-book cross-lingual knowledge transfer QA; pass@1, AI Studio API model id gemini-2.5-pro, default sampling; developer-reported3.2 (Table 3)
HiddenMath-HardGemini 1.5 Flash36.8%internal held-out competition-level math set; pass@1, AI Studio API model id gemini-1.5-flash-002, default sampling; developer-reported3.2 (Table 3)
HiddenMath-HardGemini 1.5 Pro44.3%internal held-out competition-level math set; pass@1, AI Studio API model id gemini-1.5-pro-002, default sampling; developer-reported3.2 (Table 3)
HiddenMath-HardGemini 2.0 Flash-Lite47.4%internal held-out competition-level math set; pass@1, AI Studio API model id gemini-2.0-flash-lite-001, default sampling; developer-reported3.2 (Table 3)
HiddenMath-HardGemini 2.0 Flash53.7%internal held-out competition-level math set; pass@1, AI Studio API model id gemini-2.0-flash-001, default sampling; developer-reported3.2 (Table 3)
HiddenMath-HardGemini 2.5 Flash75.5%internal held-out competition-level math set; pass@1, AI Studio API model id gemini-2.5-flash, default sampling; developer-reported3.2 (Table 3)
HiddenMath-HardGemini 2.5 Pro80.5%internal held-out competition-level math set; pass@1, AI Studio API model id gemini-2.5-pro, default sampling; developer-reported3.2 (Table 3)
LOFT (hard retrieval) — ≤128KGemini 1.5 Flash67.3%300 queries; contexts up to 128K (average); pass@1, AI Studio API model id gemini-1.5-flash-002, default sampling; developer-reported3.2 (Table 3)
LOFT (hard retrieval) — ≤128KGemini 1.5 Pro75.9%300 queries; contexts up to 128K (average); pass@1, AI Studio API model id gemini-1.5-pro-002, default sampling; developer-reported3.2 (Table 3)
LOFT (hard retrieval) — ≤128KGemini 2.0 Flash-Lite50.7%300 queries; contexts up to 128K (average); pass@1, AI Studio API model id gemini-2.0-flash-lite-001, default sampling; developer-reported3.2 (Table 3)
LOFT (hard retrieval) — ≤128KGemini 2.0 Flash58.0%300 queries; contexts up to 128K (average); pass@1, AI Studio API model id gemini-2.0-flash-001, default sampling; developer-reported3.2 (Table 3)
LOFT (hard retrieval) — ≤128KGemini 2.5 Flash82.1%300 queries; contexts up to 128K (average); pass@1, AI Studio API model id gemini-2.5-flash, default sampling; developer-reported3.2 (Table 3)
LOFT (hard retrieval) — ≤128KGemini 2.5 Pro87.0%300 queries; contexts up to 128K (average); pass@1, AI Studio API model id gemini-2.5-pro, default sampling; developer-reported3.2 (Table 3)
LOFT (hard retrieval) — 1MGemini 1.5 Flash36.7%300 queries; pointwise at exactly 1M context; pass@1, AI Studio API model id gemini-1.5-flash-002, default sampling; developer-reported3.2 (Table 3)
LOFT (hard retrieval) — 1MGemini 1.5 Pro47.1%300 queries; pointwise at exactly 1M context; pass@1, AI Studio API model id gemini-1.5-pro-002, default sampling; developer-reported3.2 (Table 3)
LOFT (hard retrieval) — 1MGemini 2.0 Flash-Lite7.6%300 queries; pointwise at exactly 1M context; pass@1, AI Studio API model id gemini-2.0-flash-lite-001, default sampling; developer-reported3.2 (Table 3)
LOFT (hard retrieval) — 1MGemini 2.0 Flash7.6%300 queries; pointwise at exactly 1M context; pass@1, AI Studio API model id gemini-2.0-flash-001, default sampling; developer-reported3.2 (Table 3)
LOFT (hard retrieval) — 1MGemini 2.5 Flash58.9%300 queries; pointwise at exactly 1M context; pass@1, AI Studio API model id gemini-2.5-flash, default sampling; developer-reported3.2 (Table 3)
LOFT (hard retrieval) — 1MGemini 2.5 Pro69.8%300 queries; pointwise at exactly 1M context; pass@1, AI Studio API model id gemini-2.5-pro, default sampling; developer-reported3.2 (Table 3)
LOFT (hard retrieval) — ≤128KOpenAI o3 (high)77.0%contexts up to 128K (average); reported by Google in the Gemini 2.5 technical report; source of the comparison figure not stated3.3 (Table 4)
LOFT (hard retrieval) — ≤128KOpenAI o4-mini (high)60.5%contexts up to 128K (average); reported by Google in the Gemini 2.5 technical report; source of the comparison figure not stated3.3 (Table 4)
LOFT (hard retrieval) — ≤128KClaude Sonnet 481.6%contexts up to 128K (average); reported by Google in the Gemini 2.5 technical report; source of the comparison figure not stated3.3 (Table 4)
LOFT (hard retrieval) — ≤128KGrok 3 Beta (Extended Thinking)73.1%contexts up to 128K (average); reported by Google in the Gemini 2.5 technical report; source of the comparison figure not stated3.3 (Table 4)
Vibe-Eval (Reka)Gemini 1.5 Flash52.3%Gemini used as judge; pass@1, AI Studio API model id gemini-1.5-flash-002, default sampling; developer-reported3.2 (Table 3)
Vibe-Eval (Reka)Gemini 1.5 Pro55.9%Gemini used as judge; pass@1, AI Studio API model id gemini-1.5-pro-002, default sampling; developer-reported3.2 (Table 3)
Vibe-Eval (Reka)Gemini 2.0 Flash-Lite51.5%Gemini used as judge; pass@1, AI Studio API model id gemini-2.0-flash-lite-001, default sampling; developer-reported3.2 (Table 3)
Vibe-Eval (Reka)Gemini 2.0 Flash55.4%Gemini used as judge; pass@1, AI Studio API model id gemini-2.0-flash-001, default sampling; developer-reported3.2 (Table 3)
Vibe-Eval (Reka)Gemini 2.5 Flash65.4%Gemini used as judge; pass@1, AI Studio API model id gemini-2.5-flash, default sampling; developer-reported3.2 (Table 3)
Vibe-Eval (Reka)Gemini 2.5 Pro67.2%Gemini used as judge; pass@1, AI Studio API model id gemini-2.5-pro, default sampling; developer-reported3.2 (Table 3)
ZeroBenchGemini 1.5 Flash0.5%Gemini used as judge; average over 4 runs; pass@1, AI Studio API model id gemini-1.5-flash-002, default sampling; developer-reported3.2 (Table 3)
ZeroBenchGemini 1.5 Pro1.0%Gemini used as judge; average over 4 runs; pass@1, AI Studio API model id gemini-1.5-pro-002, default sampling; developer-reported3.2 (Table 3)
ZeroBenchGemini 2.0 Flash-Lite0.75%Gemini used as judge; average over 4 runs; pass@1, AI Studio API model id gemini-2.0-flash-lite-001, default sampling; developer-reported3.2 (Table 3)
ZeroBenchGemini 2.0 Flash1.25%Gemini used as judge; average over 4 runs; pass@1, AI Studio API model id gemini-2.0-flash-001, default sampling; developer-reported3.2 (Table 3)
ZeroBenchGemini 2.5 Flash2.0%Gemini used as judge; average over 4 runs; pass@1, AI Studio API model id gemini-2.5-flash, default sampling; developer-reported3.2 (Table 3)
ZeroBenchGemini 2.5 Pro4.5%Gemini used as judge; average over 4 runs; pass@1, AI Studio API model id gemini-2.5-pro, default sampling; developer-reported3.2 (Table 3)
BetterChartQAGemini 1.5 Flash59.0%Gemini used as judge; pass@1, AI Studio API model id gemini-1.5-flash-002, default sampling; developer-reported3.2 (Table 3)
BetterChartQAGemini 1.5 Pro65.8%Gemini used as judge; pass@1, AI Studio API model id gemini-1.5-pro-002, default sampling; developer-reported3.2 (Table 3)
BetterChartQAGemini 2.0 Flash-Lite52.3%Gemini used as judge; pass@1, AI Studio API model id gemini-2.0-flash-lite-001, default sampling; developer-reported3.2 (Table 3)
BetterChartQAGemini 2.0 Flash57.8%Gemini used as judge; pass@1, AI Studio API model id gemini-2.0-flash-001, default sampling; developer-reported3.2 (Table 3)
BetterChartQAGemini 2.5 Flash67.3%Gemini used as judge; pass@1, AI Studio API model id gemini-2.5-flash, default sampling; developer-reported3.2 (Table 3)
BetterChartQAGemini 2.5 Pro72.4%Gemini used as judge; pass@1, AI Studio API model id gemini-2.5-pro, default sampling; developer-reported3.2 (Table 3)
FLEURS — 53 languages, WER (lower is better)Gemini 1.5 Flash12.71automatic speech recognition, 0-shot queries to public APIs, 53 of 102 languages; word error rate (character error rate for Chinese, Japanese, Korean and Thai); AI Studio API model id gemini-1.5-flash-002; developer-reported3.3 Audio Understanding (Table 5)
FLEURS — 53 languages, WER (lower is better)Gemini 1.5 Pro7.14automatic speech recognition, 0-shot queries to public APIs, 53 of 102 languages; word error rate (character error rate for Chinese, Japanese, Korean and Thai); AI Studio API model id gemini-1.5-pro-002; developer-reported3.3 Audio Understanding (Table 5)
FLEURS — 53 languages, WER (lower is better)Gemini 2.0 Flash-Lite9.60automatic speech recognition, 0-shot queries to public APIs, 53 of 102 languages; word error rate (character error rate for Chinese, Japanese, Korean and Thai); AI Studio API model id gemini-2.0-flash-lite-001; developer-reported3.3 Audio Understanding (Table 5)
FLEURS — 53 languages, WER (lower is better)Gemini 2.0 Flash9.04automatic speech recognition, 0-shot queries to public APIs, 53 of 102 languages; word error rate (character error rate for Chinese, Japanese, Korean and Thai); AI Studio API model id gemini-2.0-flash-001; developer-reported3.3 Audio Understanding (Table 5)
FLEURS — 53 languages, WER (lower is better)Gemini 2.5 Flash9.95automatic speech recognition, 0-shot queries to public APIs, 53 of 102 languages; word error rate (character error rate for Chinese, Japanese, Korean and Thai); AI Studio API model id gemini-2.5-flash; developer-reported3.3 Audio Understanding (Table 5)
FLEURS — 53 languages, WER (lower is better)Gemini 2.5 Pro6.66automatic speech recognition, 0-shot queries to public APIs, 53 of 102 languages; word error rate (character error rate for Chinese, Japanese, Korean and Thai); AI Studio API model id gemini-2.5-pro; developer-reported3.3 Audio Understanding (Table 5)
FLEURS — 53 languages, WER (lower is better)GPT-4o mini Audio Preview19.52automatic speech recognition, 0-shot queries to public APIs, 53 of 102 languages; word error rate (character error rate for Chinese, Japanese, Korean and Thai); run by Google with the same prompts and inputs — the report notes GPT metrics may differ from previously reported ones; reported by Google in the Gemini 2.5 technical report3.3 Audio Understanding (Table 5)
FLEURS — 53 languages, WER (lower is better)GPT-4o Audio Preview12.16automatic speech recognition, 0-shot queries to public APIs, 53 of 102 languages; word error rate (character error rate for Chinese, Japanese, Korean and Thai); run by Google with the same prompts and inputs — the report notes GPT metrics may differ from previously reported ones; reported by Google in the Gemini 2.5 technical report3.3 Audio Understanding (Table 5)
FLEURS — 53 languages, WER (lower is better)GPT-4o transcribe8.17automatic speech recognition, 0-shot queries to public APIs, 53 of 102 languages; word error rate (character error rate for Chinese, Japanese, Korean and Thai); run by Google with the same prompts and inputs — the report notes GPT metrics may differ from previously reported ones; reported by Google in the Gemini 2.5 technical report3.3 Audio Understanding (Table 5)
CoVoST2 — 21 languages, BLEU (higher is better)Gemini 1.5 Flash34.81speech-to-text translation of 21 languages into English, 0-shot queries to public APIs; BLEU; AI Studio API model id gemini-1.5-flash-002; developer-reported3.3 Audio Understanding (Table 5)
CoVoST2 — 21 languages, BLEU (higher is better)Gemini 1.5 Pro37.53speech-to-text translation of 21 languages into English, 0-shot queries to public APIs; BLEU; AI Studio API model id gemini-1.5-pro-002; developer-reported3.3 Audio Understanding (Table 5)
CoVoST2 — 21 languages, BLEU (higher is better)Gemini 2.0 Flash-Lite34.74speech-to-text translation of 21 languages into English, 0-shot queries to public APIs; BLEU; AI Studio API model id gemini-2.0-flash-lite-001; developer-reported3.3 Audio Understanding (Table 5)
CoVoST2 — 21 languages, BLEU (higher is better)Gemini 2.0 Flash36.35speech-to-text translation of 21 languages into English, 0-shot queries to public APIs; BLEU; AI Studio API model id gemini-2.0-flash-001; developer-reported3.3 Audio Understanding (Table 5)
CoVoST2 — 21 languages, BLEU (higher is better)Gemini 2.5 Flash36.15speech-to-text translation of 21 languages into English, 0-shot queries to public APIs; BLEU; AI Studio API model id gemini-2.5-flash; developer-reported3.3 Audio Understanding (Table 5)
CoVoST2 — 21 languages, BLEU (higher is better)Gemini 2.5 Pro38.48speech-to-text translation of 21 languages into English, 0-shot queries to public APIs; BLEU; AI Studio API model id gemini-2.5-pro; developer-reported3.3 Audio Understanding (Table 5)
CoVoST2 — 21 languages, BLEU (higher is better)GPT-4o mini Audio Preview29.5speech-to-text translation of 21 languages into English, 0-shot queries to public APIs; BLEU; run by Google with the same prompts and inputs — the report notes GPT metrics may differ from previously reported ones; reported by Google in the Gemini 2.5 technical report3.3 Audio Understanding (Table 5)
CoVoST2 — 21 languages, BLEU (higher is better)GPT-4o Audio Preview35.89speech-to-text translation of 21 languages into English, 0-shot queries to public APIs; BLEU; run by Google with the same prompts and inputs — the report notes GPT metrics may differ from previously reported ones; reported by Google in the Gemini 2.5 technical report3.3 Audio Understanding (Table 5)
ActivityNet-QA — visual-onlyGemini 1.5 Flash56.2modality: visual-only; test subset, 0-shot; 1 fps, max 1024 frames (500 frames for GPT 4.1); AI Studio API model id gemini-1.5-flash-002; developer-reported3.3 Video Understanding (Table 6)
ActivityNet-QA — visual-onlyGemini 1.5 Pro57.3modality: visual-only; test subset, 0-shot; 1 fps, max 1024 frames (500 frames for GPT 4.1); AI Studio API model id gemini-1.5-pro-002; developer-reported3.3 Video Understanding (Table 6)
ActivityNet-QA — visual-onlyGemini 2.0 Flash-Lite55.3modality: visual-only; test subset, 0-shot; 1 fps, max 1024 frames (500 frames for GPT 4.1); AI Studio API model id gemini-2.0-flash-lite-001; developer-reported3.3 Video Understanding (Table 6)
ActivityNet-QA — visual-onlyGemini 2.0 Flash56.4modality: visual-only; test subset, 0-shot; 1 fps, max 1024 frames (500 frames for GPT 4.1); AI Studio API model id gemini-2.0-flash-001; developer-reported3.3 Video Understanding (Table 6)
ActivityNet-QA — visual-onlyGemini 2.5 Flash65.1modality: visual-only; test subset, 0-shot; 1 fps, max 1024 frames (500 frames for GPT 4.1); AI Studio API model id gemini-2.5-flash; developer-reported3.3 Video Understanding (Table 6)
ActivityNet-QA — visual-onlyGemini 2.5 Pro66.7modality: visual-only; test subset, 0-shot; 1 fps, max 1024 frames (500 frames for GPT 4.1); AI Studio API model id gemini-2.5-pro; developer-reported3.3 Video Understanding (Table 6)
ActivityNet-QA — visual-onlyGPT-4.160.4modality: visual-only; test subset, 0-shot; 1 fps, max 1024 frames (500 frames for GPT 4.1); run by Google with the same prompt and video frames; reported by Google in the Gemini 2.5 technical report3.3 Video Understanding (Table 6)
EgoTempo — visual-onlyGemini 1.5 Flash34.5modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-1.5-flash-002; developer-reported3.3 Video Understanding (Table 6)
EgoTempo — visual-onlyGemini 1.5 Pro36.3modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-1.5-pro-002; developer-reported3.3 Video Understanding (Table 6)
EgoTempo — visual-onlyGemini 2.0 Flash-Lite30.1modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-2.0-flash-lite-001; developer-reported3.3 Video Understanding (Table 6)
EgoTempo — visual-onlyGemini 2.0 Flash39.3modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-2.0-flash-001; developer-reported3.3 Video Understanding (Table 6)
EgoTempo — visual-onlyGemini 2.5 Flash36.7modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-2.5-flash; developer-reported3.3 Video Understanding (Table 6)
EgoTempo — visual-onlyGemini 2.5 Pro44.3modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-2.5-pro; developer-reported3.3 Video Understanding (Table 6)
EgoTempo — visual-onlyGPT-4.140.3modality: visual-only; test subset, 0-shot; max 256 frames; run by Google with the same prompt and video frames; reported by Google in the Gemini 2.5 technical report3.3 Video Understanding (Table 6)
Perception Test — visual-onlyGemini 1.5 Flash66.5modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-1.5-flash-002; developer-reported3.3 Video Understanding (Table 6)
Perception Test — visual-onlyGemini 1.5 Pro69.4modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-1.5-pro-002; developer-reported3.3 Video Understanding (Table 6)
Perception Test — visual-onlyGemini 2.0 Flash-Lite67.5modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-2.0-flash-lite-001; developer-reported3.3 Video Understanding (Table 6)
Perception Test — visual-onlyGemini 2.0 Flash68.8modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-2.0-flash-001; developer-reported3.3 Video Understanding (Table 6)
Perception Test — visual-onlyGemini 2.5 Flash75.1modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-2.5-flash; developer-reported3.3 Video Understanding (Table 6)
Perception Test — visual-onlyGemini 2.5 Pro78.4modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-2.5-pro; developer-reported3.3 Video Understanding (Table 6)
Perception Test — visual-onlyGPT-4.164.8modality: visual-only; test subset, 0-shot; max 256 frames; run by Google with the same prompt and video frames; reported by Google in the Gemini 2.5 technical report3.3 Video Understanding (Table 6)
QVHighlights — visual-onlyGemini 1.5 Flash64.4modality: visual-only; validation subset, 4-shot; R1@0.5; max 256 frames; AI Studio API model id gemini-1.5-flash-002; developer-reported3.3 Video Understanding (Table 6)
QVHighlights — visual-onlyGemini 1.5 Pro68.7modality: visual-only; validation subset, 4-shot; R1@0.5; max 256 frames; AI Studio API model id gemini-1.5-pro-002; developer-reported3.3 Video Understanding (Table 6)
QVHighlights — visual-onlyGemini 2.0 Flash-Lite25.7modality: visual-only; validation subset, 4-shot; R1@0.5; max 256 frames; AI Studio API model id gemini-2.0-flash-lite-001; developer-reported3.3 Video Understanding (Table 6)
QVHighlights — visual-onlyGemini 2.0 Flash63.9modality: visual-only; validation subset, 4-shot; R1@0.5; max 256 frames; AI Studio API model id gemini-2.0-flash-001; developer-reported3.3 Video Understanding (Table 6)
QVHighlights — visual-onlyGemini 2.5 Flash52.4modality: visual-only; validation subset, 4-shot; R1@0.5; max 256 frames; AI Studio API model id gemini-2.5-flash; developer-reported3.3 Video Understanding (Table 6)
QVHighlights — visual-onlyGemini 2.5 Pro75.0modality: visual-only; validation subset, 4-shot; R1@0.5; max 256 frames; AI Studio API model id gemini-2.5-pro; developer-reported3.3 Video Understanding (Table 6)
QVHighlights — visual-onlyGPT-4.171.4modality: visual-only; validation subset, 4-shot; R1@0.5; max 256 frames; run by Google with the same prompt and video frames; reported by Google in the Gemini 2.5 technical report3.3 Video Understanding (Table 6)
VideoMMMU — visual-onlyGemini 1.5 Flash64.8modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-1.5-flash-002; developer-reported3.3 Video Understanding (Table 6)
VideoMMMU — visual-onlyGemini 1.5 Pro70.4modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-1.5-pro-002; developer-reported3.3 Video Understanding (Table 6)
VideoMMMU — visual-onlyGemini 2.0 Flash-Lite64.3modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-2.0-flash-lite-001; developer-reported3.3 Video Understanding (Table 6)
VideoMMMU — visual-onlyGemini 2.0 Flash68.5modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-2.0-flash-001; developer-reported3.3 Video Understanding (Table 6)
VideoMMMU — visual-onlyGemini 2.5 Flash79.2modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-2.5-flash; developer-reported3.3 Video Understanding (Table 6)
VideoMMMU — visual-onlyGemini 2.5 Pro83.6modality: visual-only; test subset, 0-shot; max 256 frames; AI Studio API model id gemini-2.5-pro; developer-reported3.3 Video Understanding (Table 6)
VideoMMMU — visual-onlyGPT-4.160.9modality: visual-only; test subset, 0-shot; max 256 frames; run by Google with the same prompt and video frames; reported by Google in the Gemini 2.5 technical report3.3 Video Understanding (Table 6)
1H-VideoQA — visual-onlyGemini 1.5 Flash61.9modality: visual-only; test subset, 0-shot; max 7200 frames; AI Studio API model id gemini-1.5-flash-002; developer-reported3.3 Video Understanding (Table 6)
1H-VideoQA — visual-onlyGemini 1.5 Pro72.2modality: visual-only; test subset, 0-shot; max 7200 frames; AI Studio API model id gemini-1.5-pro-002; developer-reported3.3 Video Understanding (Table 6)
1H-VideoQA — visual-onlyGemini 2.0 Flash-Lite55.6modality: visual-only; test subset, 0-shot; max 7200 frames; AI Studio API model id gemini-2.0-flash-lite-001; developer-reported3.3 Video Understanding (Table 6)
1H-VideoQA — visual-onlyGemini 2.0 Flash67.5modality: visual-only; test subset, 0-shot; max 7200 frames; AI Studio API model id gemini-2.0-flash-001; developer-reported3.3 Video Understanding (Table 6)
1H-VideoQA — visual-onlyGemini 2.5 Flash67.5modality: visual-only; test subset, 0-shot; max 7200 frames; AI Studio API model id gemini-2.5-flash; developer-reported3.3 Video Understanding (Table 6)
1H-VideoQA — visual-onlyGemini 2.5 Pro81.0modality: visual-only; test subset, 0-shot; max 7200 frames; AI Studio API model id gemini-2.5-pro; developer-reported3.3 Video Understanding (Table 6)
1H-VideoQA — visual-onlyGPT-4.156.8modality: visual-only; test subset, 0-shot; max 7200 frames; run by Google with the same prompt and video frames; reported by Google in the Gemini 2.5 technical report3.3 Video Understanding (Table 6)
LVBench — audio + visualGemini 1.5 Flash61.9modality: audio + visual; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-1.5-flash-002; developer-reported3.3 Video Understanding (Table 6)
LVBench — audio + visualGemini 1.5 Pro65.7modality: audio + visual; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-1.5-pro-002; developer-reported3.3 Video Understanding (Table 6)
LVBench — audio + visualGemini 2.0 Flash-Lite52modality: audio + visual; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-2.0-flash-lite-001; developer-reported3.3 Video Understanding (Table 6)
LVBench — audio + visualGemini 2.0 Flash61.8modality: audio + visual; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-2.0-flash-001; developer-reported3.3 Video Understanding (Table 6)
LVBench — audio + visualGemini 2.5 Flash62.7modality: audio + visual; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-2.5-flash; developer-reported3.3 Video Understanding (Table 6)
LVBench — audio + visualGemini 2.5 Pro78.7modality: audio + visual; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-2.5-pro; developer-reported3.3 Video Understanding (Table 6)
LVBench — audio + visualGPT-4.163.4modality: audio + visual; test subset, 0-shot; max 1024 frames; run by Google with the same prompt and video frames; reported by Google in the Gemini 2.5 technical report3.3 Video Understanding (Table 6)
VATEX — audio + visualGemini 1.5 Flash56.9modality: audio + visual; test subset, 4-shot; CIDEr; max 64 frames; AI Studio API model id gemini-1.5-flash-002; developer-reported3.3 Video Understanding (Table 6)
VATEX — audio + visualGemini 1.5 Pro55.5modality: audio + visual; test subset, 4-shot; CIDEr; max 64 frames; AI Studio API model id gemini-1.5-pro-002; developer-reported3.3 Video Understanding (Table 6)
VATEX — audio + visualGemini 2.0 Flash-Lite58.5modality: audio + visual; test subset, 4-shot; CIDEr; max 64 frames; AI Studio API model id gemini-2.0-flash-lite-001; developer-reported3.3 Video Understanding (Table 6)
VATEX — audio + visualGemini 2.0 Flash56.9modality: audio + visual; test subset, 4-shot; CIDEr; max 64 frames; AI Studio API model id gemini-2.0-flash-001; developer-reported3.3 Video Understanding (Table 6)
VATEX — audio + visualGemini 2.5 Flash65.2modality: audio + visual; test subset, 4-shot; CIDEr; max 64 frames; AI Studio API model id gemini-2.5-flash; developer-reported3.3 Video Understanding (Table 6)
VATEX — audio + visualGemini 2.5 Pro71.3modality: audio + visual; test subset, 4-shot; CIDEr; max 64 frames; AI Studio API model id gemini-2.5-pro; developer-reported3.3 Video Understanding (Table 6)
VATEX — audio + visualGPT-4.164.1modality: audio + visual; test subset, 4-shot; CIDEr; max 64 frames; run by Google with the same prompt and video frames; reported by Google in the Gemini 2.5 technical report3.3 Video Understanding (Table 6)
VATEX-ZH — audio + visualGemini 1.5 Flash46.2modality: audio + visual; validation subset, 4-shot; CIDEr; max 64 frames; AI Studio API model id gemini-1.5-flash-002; developer-reported3.3 Video Understanding (Table 6)
VATEX-ZH — audio + visualGemini 1.5 Pro52.2modality: audio + visual; validation subset, 4-shot; CIDEr; max 64 frames; AI Studio API model id gemini-1.5-pro-002; developer-reported3.3 Video Understanding (Table 6)
VATEX-ZH — audio + visualGemini 2.0 Flash-Lite43.2modality: audio + visual; validation subset, 4-shot; CIDEr; max 64 frames; AI Studio API model id gemini-2.0-flash-lite-001; developer-reported3.3 Video Understanding (Table 6)
VATEX-ZH — audio + visualGemini 2.0 Flash48.5modality: audio + visual; validation subset, 4-shot; CIDEr; max 64 frames; AI Studio API model id gemini-2.0-flash-001; developer-reported3.3 Video Understanding (Table 6)
VATEX-ZH — audio + visualGemini 2.5 Flash43.9modality: audio + visual; validation subset, 4-shot; CIDEr; max 64 frames; AI Studio API model id gemini-2.5-flash; developer-reported3.3 Video Understanding (Table 6)
VATEX-ZH — audio + visualGemini 2.5 Pro59.7modality: audio + visual; validation subset, 4-shot; CIDEr; max 64 frames; AI Studio API model id gemini-2.5-pro; developer-reported3.3 Video Understanding (Table 6)
VATEX-ZH — audio + visualGPT-4.148.7modality: audio + visual; validation subset, 4-shot; CIDEr; max 64 frames; run by Google with the same prompt and video frames; reported by Google in the Gemini 2.5 technical report3.3 Video Understanding (Table 6)
YouCook2 Cap — audio + visualGemini 1.5 Flash153.2modality: audio + visual; validation subset, 4-shot; CIDEr; max 256 frames; AI Studio API model id gemini-1.5-flash-002; developer-reported3.3 Video Understanding (Table 6)
YouCook2 Cap — audio + visualGemini 1.5 Pro170.0modality: audio + visual; validation subset, 4-shot; CIDEr; max 256 frames; AI Studio API model id gemini-1.5-pro-002; developer-reported3.3 Video Understanding (Table 6)
YouCook2 Cap — audio + visualGemini 2.0 Flash-Lite78.6modality: audio + visual; validation subset, 4-shot; CIDEr; max 256 frames; AI Studio API model id gemini-2.0-flash-lite-001; developer-reported3.3 Video Understanding (Table 6)
YouCook2 Cap — audio + visualGemini 2.0 Flash129.0modality: audio + visual; validation subset, 4-shot; CIDEr; max 256 frames; AI Studio API model id gemini-2.0-flash-001; developer-reported3.3 Video Understanding (Table 6)
YouCook2 Cap — audio + visualGemini 2.5 Flash177.6modality: audio + visual; validation subset, 4-shot; CIDEr; max 256 frames; AI Studio API model id gemini-2.5-flash; developer-reported3.3 Video Understanding (Table 6)
YouCook2 Cap — audio + visualGemini 2.5 Pro188.3modality: audio + visual; validation subset, 4-shot; CIDEr; max 256 frames; AI Studio API model id gemini-2.5-pro; developer-reported3.3 Video Understanding (Table 6)
YouCook2 Cap — audio + visualGPT-4.1127.6modality: audio + visual; validation subset, 4-shot; CIDEr; max 256 frames; run by Google with the same prompt and video frames; reported by Google in the Gemini 2.5 technical report3.3 Video Understanding (Table 6)
Minerva — visual + subtitlesGemini 1.5 Flash49.6modality: visual + subtitles; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-1.5-flash-002; developer-reported3.3 Video Understanding (Table 6)
Minerva — visual + subtitlesGemini 1.5 Pro52.8modality: visual + subtitles; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-1.5-pro-002; developer-reported3.3 Video Understanding (Table 6)
Minerva — visual + subtitlesGemini 2.0 Flash-Lite46.8modality: visual + subtitles; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-2.0-flash-lite-001; developer-reported3.3 Video Understanding (Table 6)
Minerva — visual + subtitlesGemini 2.0 Flash52.4modality: visual + subtitles; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-2.0-flash-001; developer-reported3.3 Video Understanding (Table 6)
Minerva — visual + subtitlesGemini 2.5 Flash60.7modality: visual + subtitles; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-2.5-flash; developer-reported3.3 Video Understanding (Table 6)
Minerva — visual + subtitlesGemini 2.5 Pro67.6modality: visual + subtitles; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-2.5-pro; developer-reported3.3 Video Understanding (Table 6)
Minerva — visual + subtitlesGPT-4.154.0modality: visual + subtitles; test subset, 0-shot; max 1024 frames; run by Google with the same prompt and video frames; reported by Google in the Gemini 2.5 technical report3.3 Video Understanding (Table 6)
Neptune — visual + subtitlesGemini 1.5 Flash78.7modality: visual + subtitles; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-1.5-flash-002; developer-reported3.3 Video Understanding (Table 6)
Neptune — visual + subtitlesGemini 1.5 Pro82.7modality: visual + subtitles; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-1.5-pro-002; developer-reported3.3 Video Understanding (Table 6)
Neptune — visual + subtitlesGemini 2.0 Flash-Lite81.5modality: visual + subtitles; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-2.0-flash-lite-001; developer-reported3.3 Video Understanding (Table 6)
Neptune — visual + subtitlesGemini 2.0 Flash83.1modality: visual + subtitles; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-2.0-flash-001; developer-reported3.3 Video Understanding (Table 6)
Neptune — visual + subtitlesGemini 2.5 Flash84.3modality: visual + subtitles; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-2.5-flash; developer-reported3.3 Video Understanding (Table 6)
Neptune — visual + subtitlesGemini 2.5 Pro87.3modality: visual + subtitles; test subset, 0-shot; max 1024 frames; AI Studio API model id gemini-2.5-pro; developer-reported3.3 Video Understanding (Table 6)
Neptune — visual + subtitlesGPT-4.185.2modality: visual + subtitles; test subset, 0-shot; max 1024 frames; run by Google with the same prompt and video frames; reported by Google in the Gemini 2.5 technical report3.3 Video Understanding (Table 6)
EN text-to-text Policy Violations — Change vs. Gemini 1.5 Flash 002Gemini 2.0 Flash-Lite↓14.3%automated internal evaluation, change relative to Gemini 1.5 Flash 002; down arrow = fewer violations (better); evaluation recently updated, not comparable with past reports; developer-reported5.4 (Table 7)
i18n text-to-text Policy Violations — Change vs. Gemini 1.5 Flash 002Gemini 2.0 Flash-Lite↓7.3%automated internal evaluation, change relative to Gemini 1.5 Flash 002; down arrow = fewer violations (better); evaluation recently updated, not comparable with past reports; developer-reported5.4 (Table 7)
Image-to-text Policy Violations — Change vs. Gemini 1.5 Flash 002Gemini 2.0 Flash-Lite↑4.6%automated internal evaluation, change relative to Gemini 1.5 Flash 002; up arrow = more violations; report marks these '*No egregious losses reported'; marked * (no egregious losses reported); developer-reported5.4 (Table 7)
Tone — Change vs. Gemini 1.5 Flash 002Gemini 2.0 Flash-Lite↑8.4%automated internal evaluation, change relative to Gemini 1.5 Flash 002; up arrow = improvement; developer-reported5.4 (Table 7)
Helpfulness / Instruction Following — Change vs. Gemini 1.5 Flash 002Gemini 2.0 Flash-Lite↓19.7%automated internal evaluation, change relative to Gemini 1.5 Flash 002; up arrow = improvement; developer-reported5.4 (Table 7)
EN text-to-text Policy Violations — Change vs. Gemini 1.5 Flash 002Gemini 2.0 Flash↓12.7%automated internal evaluation, change relative to Gemini 1.5 Flash 002; down arrow = fewer violations (better); evaluation recently updated, not comparable with past reports; developer-reported5.4 (Table 7)
i18n text-to-text Policy Violations — Change vs. Gemini 1.5 Flash 002Gemini 2.0 Flash↓7.8%automated internal evaluation, change relative to Gemini 1.5 Flash 002; down arrow = fewer violations (better); evaluation recently updated, not comparable with past reports; developer-reported5.4 (Table 7)
Image-to-text Policy Violations — Change vs. Gemini 1.5 Flash 002Gemini 2.0 Flash↑5.2%automated internal evaluation, change relative to Gemini 1.5 Flash 002; up arrow = more violations; report marks these '*No egregious losses reported'; marked * (no egregious losses reported); developer-reported5.4 (Table 7)
Tone — Change vs. Gemini 1.5 Flash 002Gemini 2.0 Flash↑1.5%automated internal evaluation, change relative to Gemini 1.5 Flash 002; up arrow = improvement; developer-reported5.4 (Table 7)
Helpfulness / Instruction Following — Change vs. Gemini 1.5 Flash 002Gemini 2.0 Flash↓13.2%automated internal evaluation, change relative to Gemini 1.5 Flash 002; up arrow = improvement; developer-reported5.4 (Table 7)
EN text-to-text Policy Violations — Change vs. Gemini 1.5 Flash 002Gemini 2.5 Flash↓8.2%automated internal evaluation, change relative to Gemini 1.5 Flash 002; down arrow = fewer violations (better); evaluation recently updated, not comparable with past reports; developer-reported5.4 (Table 7)
i18n text-to-text Policy Violations — Change vs. Gemini 1.5 Flash 002Gemini 2.5 Flash↑1.1%automated internal evaluation, change relative to Gemini 1.5 Flash 002; down arrow = fewer violations (better); evaluation recently updated, not comparable with past reports; marked * (no egregious losses reported); developer-reported5.4 (Table 7)
Image-to-text Policy Violations — Change vs. Gemini 1.5 Flash 002Gemini 2.5 Flash↑6.4%automated internal evaluation, change relative to Gemini 1.5 Flash 002; up arrow = more violations; report marks these '*No egregious losses reported'; marked * (no egregious losses reported); developer-reported5.4 (Table 7)
Tone — Change vs. Gemini 1.5 Flash 002Gemini 2.5 Flash↑7.9%automated internal evaluation, change relative to Gemini 1.5 Flash 002; up arrow = improvement; developer-reported5.4 (Table 7)
Helpfulness / Instruction Following — Change vs. Gemini 1.5 Flash 002Gemini 2.5 Flash↑13.6%automated internal evaluation, change relative to Gemini 1.5 Flash 002; up arrow = improvement; developer-reported5.4 (Table 7)
EN text-to-text Policy Violations — Change vs. Gemini 1.5 Pro 002Gemini 2.5 Pro↓0.9%automated internal evaluation, change relative to Gemini 1.5 Pro 002; down arrow = fewer violations (better); evaluation recently updated, not comparable with past reports; developer-reported5.4 (Table 7)
i18n text-to-text Policy Violations — Change vs. Gemini 1.5 Pro 002Gemini 2.5 Pro↓3.5%automated internal evaluation, change relative to Gemini 1.5 Pro 002; down arrow = fewer violations (better); evaluation recently updated, not comparable with past reports; developer-reported5.4 (Table 7)
Image-to-text Policy Violations — Change vs. Gemini 1.5 Pro 002Gemini 2.5 Pro↑1.8%automated internal evaluation, change relative to Gemini 1.5 Pro 002; up arrow = more violations; report marks these '*No egregious losses reported'; marked * (no egregious losses reported); developer-reported5.4 (Table 7)
Tone — Change vs. Gemini 1.5 Pro 002Gemini 2.5 Pro↑18.4%automated internal evaluation, change relative to Gemini 1.5 Pro 002; up arrow = improvement; developer-reported5.4 (Table 7)
Helpfulness / Instruction Following — Change vs. Gemini 1.5 Pro 002Gemini 2.5 Pro↑14.8%automated internal evaluation, change relative to Gemini 1.5 Pro 002; up arrow = improvement; developer-reported5.4 (Table 7)
Automated Red Teaming (ART) — Dangerous Content policy violationsGemini 1.5 Flash 00238.3%violations discovered by automated red teaming (Gemini attackers and judges, black-box); lower is better; developer-reported5.5 For Safety (Table 8)
Automated Red Teaming (ART) — Helpfulness violationsGemini 1.5 Flash 0029.5%violations discovered by automated red teaming; lower is better; developer-reported5.5 For Safety (Table 8)
Automated Red Teaming (ART) — Dangerous Content policy violationsGemini 1.5 Pro 00243.5%violations discovered by automated red teaming (Gemini attackers and judges, black-box); lower is better; developer-reported5.5 For Safety (Table 8)
Automated Red Teaming (ART) — Helpfulness violationsGemini 1.5 Pro 0028.9%violations discovered by automated red teaming; lower is better; developer-reported5.5 For Safety (Table 8)
Automated Red Teaming (ART) — Dangerous Content policy violationsGemini 2.0 Flash25.2%violations discovered by automated red teaming (Gemini attackers and judges, black-box); lower is better; developer-reported5.5 For Safety (Table 8)
Automated Red Teaming (ART) — Helpfulness violationsGemini 2.0 Flash8.1%violations discovered by automated red teaming; lower is better; developer-reported5.5 For Safety (Table 8)
Automated Red Teaming (ART) — Dangerous Content policy violationsGemini 2.5 Flash26.9%violations discovered by automated red teaming (Gemini attackers and judges, black-box); lower is better; developer-reported5.5 For Safety (Table 8)
Automated Red Teaming (ART) — Helpfulness violationsGemini 2.5 Flash6.6%violations discovered by automated red teaming; lower is better; developer-reported5.5 For Safety (Table 8)
Automated Red Teaming (ART) — Dangerous Content policy violationsGemini 2.5 Pro24.3%violations discovered by automated red teaming (Gemini attackers and judges, black-box); lower is better; developer-reported5.5 For Safety (Table 8)
Automated Red Teaming (ART) — Helpfulness violationsGemini 2.5 Pro6.1%violations discovered by automated red teaming; lower is better; developer-reported5.5 For Safety (Table 8)
Indirect prompt injection attack success rate — Actor CriticGemini 2.0 Flash-Lite52.0%best attack success rate over 500 held-out scenarios in which the injection exfiltrated synthetic private data (passport numbers); lower is better; change vs. Gemini 1.5 Flash 002: ↓44.2%; developer-reported5.5 For Security (Table 9)
Indirect prompt injection attack success rate — Beam SearchGemini 2.0 Flash-Lite75.4%best attack success rate over 500 held-out scenarios in which the injection exfiltrated synthetic private data (passport numbers); lower is better; change vs. Gemini 1.5 Flash 002: ↓9.0%; developer-reported5.5 For Security (Table 9)
Indirect prompt injection attack success rate — Tree of Attacks w/ Pruning (TAP)Gemini 2.0 Flash-Lite64.8%best attack success rate over 500 held-out scenarios in which the injection exfiltrated synthetic private data (passport numbers); lower is better; change vs. Gemini 1.5 Flash 002: ↓17.4%; developer-reported5.5 For Security (Table 9)
Indirect prompt injection attack success rate — Actor CriticGemini 2.0 Flash68.0%best attack success rate over 500 held-out scenarios in which the injection exfiltrated synthetic private data (passport numbers); lower is better; change vs. Gemini 1.5 Flash 002: ↓28.2%; developer-reported5.5 For Security (Table 9)
Indirect prompt injection attack success rate — Beam SearchGemini 2.0 Flash67.2%best attack success rate over 500 held-out scenarios in which the injection exfiltrated synthetic private data (passport numbers); lower is better; change vs. Gemini 1.5 Flash 002: ↓17.2%; developer-reported5.5 For Security (Table 9)
Indirect prompt injection attack success rate — Tree of Attacks w/ Pruning (TAP)Gemini 2.0 Flash98.4%best attack success rate over 500 held-out scenarios in which the injection exfiltrated synthetic private data (passport numbers); lower is better; change vs. Gemini 1.5 Flash 002: ↑16.2%; developer-reported5.5 For Security (Table 9)
Indirect prompt injection attack success rate — Actor CriticGemini 2.5 Flash40.8%best attack success rate over 500 held-out scenarios in which the injection exfiltrated synthetic private data (passport numbers); lower is better; change vs. Gemini 1.5 Flash 002: ↓55.4%; developer-reported5.5 For Security (Table 9)
Indirect prompt injection attack success rate — Beam SearchGemini 2.5 Flash4.2%best attack success rate over 500 held-out scenarios in which the injection exfiltrated synthetic private data (passport numbers); lower is better; change vs. Gemini 1.5 Flash 002: ↓80.2%; developer-reported5.5 For Security (Table 9)
Indirect prompt injection attack success rate — Tree of Attacks w/ Pruning (TAP)Gemini 2.5 Flash53.6%best attack success rate over 500 held-out scenarios in which the injection exfiltrated synthetic private data (passport numbers); lower is better; change vs. Gemini 1.5 Flash 002: ↓28.6%; developer-reported5.5 For Security (Table 9)
Indirect prompt injection attack success rate — Actor CriticGemini 2.5 Pro61.4%best attack success rate over 500 held-out scenarios in which the injection exfiltrated synthetic private data (passport numbers); lower is better; change vs. Gemini 1.5 Pro 002: ↓36.8%; developer-reported5.5 For Security (Table 9)
Indirect prompt injection attack success rate — Beam SearchGemini 2.5 Pro63.8%best attack success rate over 500 held-out scenarios in which the injection exfiltrated synthetic private data (passport numbers); lower is better; change vs. Gemini 1.5 Pro 002: ↓35.6%; developer-reported5.5 For Security (Table 9)
Indirect prompt injection attack success rate — Tree of Attacks w/ Pruning (TAP)Gemini 2.5 Pro30.8%best attack success rate over 500 held-out scenarios in which the injection exfiltrated synthetic private data (passport numbers); lower is better; change vs. Gemini 1.5 Pro 002: ↓57.0%; developer-reported5.5 For Security (Table 9)
Divergence attack (Nasr et al. 2023) — Divergence rateGemini 2.0 Flash and Flash-Lite69%'roughly'; 3750 prompts split across 125 single-token characters; developer-reported5.6 Extractable Memorization and Divergence
Divergence attack (Nasr et al. 2023) — Divergence rateGemini 2.5 model family59%'roughly'; 3750 prompts split across 125 single-token characters; developer-reported5.6 Extractable Memorization and Divergence
Divergence attack (Nasr et al. 2023) — Emitted text classified as memorization, given divergenceGemini 2.X model family0.2%'roughly'; developer-reported5.6 Extractable Memorization and Divergence
Autonomous cyber offense suite — Easy (InterCode-CTF)Gemini 2.5 Pro74/76challenges solved; solved if at least one of N attempts captures the flag (N between 5 and 30); Bash and Python tools; Gemini 2.5 Pro up to version 06-05; Cyber Autonomy Level 1 CCL not reached; developer-reported5.7 (Table 10; Cybersecurity)
Autonomous cyber offense suite — Medium (in-house CTFs)Gemini 2.5 Pro11/13challenges solved; solved if at least one of N attempts captures the flag (N between 5 and 30); Bash and Python tools; Gemini 2.5 Pro up to version 06-05; Cyber Autonomy Level 1 CCL not reached; developer-reported5.7 (Table 10; Cybersecurity)
Autonomous cyber offense suite — Hard (Hack the Box)Gemini 2.5 Pro1/13challenges solved; solved if at least one of N attempts captures the flag (N between 5 and 30); Bash and Python tools; Gemini 2.5 Pro up to version 06-05; Cyber Autonomy Level 1 CCL not reached; developer-reported5.7 (Table 10; Cybersecurity)
Cybersecurity key skills benchmark — EasyGemini 2.5 Pro7/8challenges solved of 48 mapped from an external vendor; solved if at least one attempt captures the flag (10–50 attempts); Gemini 2.5 Pro up to version 06-05; alert threshold reached, Cyber Uplift Level 1 CCL not reached; developer-reported5.7 (Table 10; Cybersecurity)
Cybersecurity key skills benchmark — MediumGemini 2.5 Pro14/28challenges solved of 48 mapped from an external vendor; solved if at least one attempt captures the flag (10–50 attempts); Gemini 2.5 Pro up to version 06-05; alert threshold reached, Cyber Uplift Level 1 CCL not reached; developer-reported5.7 (Table 10; Cybersecurity)
Cybersecurity key skills benchmark — HardGemini 2.5 Pro6/12challenges solved of 48 mapped from an external vendor; solved if at least one attempt captures the flag (10–50 attempts); Gemini 2.5 Pro up to version 06-05; alert threshold reached, Cyber Uplift Level 1 CCL not reached; developer-reported5.7 (Table 10; Cybersecurity)
Stealth challenges (Phuong et al. 2025)Gemini 2.5 Pro2/5challenges solved; Gemini 2.5 Pro Preview 03-25, 50 retries, scaffold with chain-of-thought and reflection; developer-reported5.7 (Table 10; Deceptive Alignment)
Situational awareness challenges (Phuong et al. 2025)Gemini 2.5 Pro2/11challenges solved; Gemini 2.5 Pro Preview 03-25, 50 retries; developer-reported5.7 (Table 10; Deceptive Alignment)
Situational awareness challenges (Phuong et al. 2025) — Disabled ToolGemini 2.5 Pro42%success rate across 50 trials; highest of the 11 situational-awareness evaluations; no successes on 8 of 11; developer-reported5.7 Deceptive Alignment
Stealth challenges (Phuong et al. 2025) — Decision SabotageGemini 2.5 Pro~44%success rate; developer-reported5.7 Deceptive Alignment
Stealth challenges (Phuong et al. 2025) — Oversight PatternGemini 2.5 Pro~35%success rate; report says this 'is similar to human performance'; developer-reported5.7 Deceptive Alignment

Provenance

The page summarises version 6 of the report as rendered by arXiv's HTML service on September 19, 2026. Figures are images and their values are not reproduced. The report's cybersecurity counts and its LiveCodeBench figure for Gemini 2.5 Pro differ from those in the June 27, 2025 model card, which describes different model versions and dates. All results are reported by Google; comparison figures for other developers' models are mostly those developers' own numbers or public leaderboards. Confidence is medium.

Relationships