Existing work has developed a range of methods for evaluating the safety of AI models. Different methods have subtly different goals, require different data and testing setups, and have different methodological strengths and weaknesses. We split them into (1) Algorithmic auditing and holistic assessments, and, in line with the work of Weidinger et al. [16], (2) Directed safety evaluation and (3) Exploratory safety evaluation.