Model reference · open weights
gpt-oss-safeguard is an open-weight language model from OpenAI. gpt-oss-safeguard-20b (MXFP4) weighs 14.6 GB in vLLM, 13.8 GB of files; the smallest configuration that runs it is 2× RTX 3060 12 GB.
Summary of the openai/gpt-oss-safeguard-20b model card, 2026-10-01
What it is
| Released by | OpenAI |
|---|---|
| Released | 2025-09-18 |
| Parameters | 21.5B |
| VRAM | 14.6 GB in vLLM, 13.8 GB of files for the weights |
What it runs on
| Card | Requests at once | Context max | Memory | |
|---|---|---|---|---|
| 8K each | 32K each | |||
| RTX 3060 12 GB | — | — | — | 11.6 GB |
| RTX 4060 Ti 16 GB FP4 without its speed-up here | — | — | 543 | 15.4 GB |
| RTX 3090 24 GB FP4 without its speed-up here | 26 | 8 | all 128K | 23.4 GB |
| RTX 4090 24 GB FP4 without its speed-up here | 26 | 8 | all 128K | 23.4 GB |
| RTX 5090 32 GB | 51 | 17 | all 128K | 31.0 GB |
| L40S 48 GB FP4 without its speed-up here | 93 | 31 | all 128K | 44.0 GB |
| A100 80 GB FP4 without its speed-up here | 206 | 69 | all 128K | 78.2 GB |
| H100 80 GB FP4 without its speed-up here | 144 | 48 | all 128K | 78.1 GB |
| RTX PRO 6000 Blackwell 96 GB | 183 | 61 | all 128K | 93.8 GB |
| DGX Spark (GB10) 128 GB unified | 217 | 72 | all 128K | 107 GB |
| H200 141 GB FP4 without its speed-up here | 293 | 97 | all 128K | 138 GB |
| B200 180 GB | 387 | 96 | all 128K | 176 GB |
| 2× RTX 3060 12 GB tensor parallel · FP4 without its speed-up here | 23 | 7 | all 128K | 11.6 GB a card |
| 2× RTX 4060 Ti 16 GB tensor parallel · FP4 without its speed-up here | 48 | 16 | all 128K | 15.4 GB a card |
| Requests at once | 8K tokens each | 32K tokens each |
|---|---|---|
| 1 | 15.6 GB | 16.2 GB |
| 5 | 16.8 GB | 19.8 GB |
| 8 | 17.7 GB | 22.6 GB |
| 16 | 20.2 GB | 29.8 GB |
| 32 | 25.1 GB | 44.4 GB |
| 64 | 34.8 GB | 73.5 GB |
One card, with vLLM's small-card settings.
Builds
| Build | Params | Precision | Weights | Smallest setup |
|---|---|---|---|---|
| gpt-oss-safeguard-20b (above) ↗ | 21.5B | MXFP4 | 14.6 GB | 2× RTX 3060 12 GB |
| gpt-oss-safeguard-120b ↗ | 120.4B | MXFP4 | 69.2 GB | H100 80 GB |
From the model card
gpt-oss-safeguard-120b and gpt-oss-safeguard-20b are safety reasoning models built-upon gpt-oss. With these models, you can classify text content based on safety policies that you provide and perform a suite of foundational safety tasks. These models are intended for safety use cases. For other applications, we recommend using gpt-oss models.
This model gpt-oss-safeguard-20b (21B parameters with 3.6B active parameters) fits into GPUs with 16GB of VRAM. Check out gpt-oss-safeguard-120b (117B parameters with 5.1B active parameters) for the larger model.
Both models were trained on our harmony response format and should only be used with the harmony format as it will not work correctly otherwise.
You can use gpt-oss-safeguard-120b and gpt-oss-safeguard-20b similar to gpt-oss-120b and gpt-oss-20b as described in our respective cookbooks. We’ve also provided a detailed prompting guide that provides guidelines for how to craft your policy and use it with the models.
To download the model weights from Hugging Face hub using similar instructions to gpt-oss-120b.
gpt-oss-safeguard is a model partner of the Robust Open Online Safety Tools (ROOST) Model Community. The ROOST Model Community (RMC) is a group of safety practitioners exploring open source AI models to protect online spaces. As an RMC model partner, OpenAI is committed to incorporating user feedback and jointly iterating on future releases in pursuit of open safety. Visit the RMC GitHub repo to learn more about this partnership and how to get involved.
Quoted from the model card on Hugging Face. The full card is behind the Hugging Face link above.