Nemotron 3.5 Content Safety
NVIDIA · released Jun 4, 2026
NVIDIA Nemotron 3.5 Content Safety is a compact 4B-parameter multimodal guardrail model from NVIDIA, fine-tuned from Google Gemma-3-4B. It moderates both inputs to and responses from LLMs and VLMs, accepting...
Specification
- Context window
- 131K
- Max output
- 118K
- Knowledge cutoff
- Not stated
- Parameters
- 4.3B
- Licence
- other
- Serving providers
- 1
- Moderated
- No
- Uptime
- 100.0%
Intelligence
—
Not benchmarked
Coding
—
Coding Index
Agentic
—
Agentic Index
Output speed
255 t/s
Median across providers
Latency
168ms
Time to first token
Cost per task
$0.03
Estimated
Benchmarks
Where the score comes from
The Intelligence Index is a composite. These are the underlying evaluations this model was actually measured on.
Evaluation scores
This model has not been put through the benchmark suite. Its speed, latency and pricing figures below are still measured.
Against its peers
Intelligence Index · this model highlighted, nearest peers in grey
- Qwen3.8 MaxQwen58.1
- Claude Opus 5.5Anthropic57.6
- Claude Sonnet 5.5Anthropic56.0
- Claude Fable 5.1Anthropic53.4
- GPT-6 AstraOpenAI52.7
- Gemini 4 ArgonGoogle52.6
- Muse WonderMeta52.4
Peers are the models sitting closest on the Intelligence Index — the set you would realistically choose between.
View as table
| Model | Intelligence |
|---|---|
| Qwen3.8 Max | 58.1 |
| Claude Opus 5.5 | 57.6 |
| Claude Sonnet 5.5 | 56.0 |
| Claude Fable 5.1 | 53.4 |
| GPT-6 Astra | 52.7 |
| Gemini 4 Argon | 52.6 |
| Muse Wonder | 52.4 |
Pricing
What it costs to run
List prices per million tokens, plus what one representative task works out to.
List price
- Input / 1M tokens
- $0.2
- Output / 1M tokens
- $0.2
- Cached input / 1M
- Not offered
- Blended 3:1
- $0.2
One task, estimated
$0.03
- Input tokens
- 50,000
- Output tokens
- 80,000
- Profile
- Reasoning
Estimated from list pricing: 50K input tokens plus 80K output tokens for reasoning models (25K for non-reasoning).
Serving providers
Speed and latency figures are medians across these providers, so a widely-served model reports a blend rather than any single endpoint.