Skip to content

Benchmark

Cybench

Capture-the-flag benchmark built from past competition challenges; many tasks have public write-ups agents can retrieve.

Known aliases

  • Cybench

Current stories

buildConfirmed21 publishers

Mistral's Arthur Mensch claims a cybersecurity edge over unnamed Chinese models

Mistral CEO Arthur Mensch said on October 6th that the company's newest model beats unnamed Chinese rivals on cybersecurity. He gave no tests or scores with the claim, so buyers looking for a supplier outside the US and China cannot yet use it to choose one.

Perspective Coverage

25 publishers
Builder
Builder 38%
Operator
Operator 34%
Investor
Investor 28%

Reality

Evidence60
Adoption20
Hype gap+35
Incentives75
Confidence65
leadershipConfirmed3 publishers

Mistral pitches Large 4's open weights as insurance against a vendor cutting off a capability

Mistral launched a trillion-parameter Large 4 preview Tuesday and is selling its open weights as insurance against a closed vendor cutting off a capability. Buyers get a model no supplier can retire and pay for it with a coding score about twelve points behind the leading closed systems.

Perspective Coverage

3 publishers
Builder
Builder 35%
Operator
Operator 45%
Investor
Investor 20%

Reality

Evidence45
Adoption
Not scored
Hype gap+35
Incentives70
Confidence55
productOne report1 publisher

AI vulnerability scanners flag 41% to 99% of safe code in AWS's Deception Benchmark

AWS's Deception Benchmark found AI vulnerability scanners catch up to 95% of real bugs but flag 41% to 99% of safe code. Its samples were built to fool models, so teams still need their own false-alarm count before sizing the triage work.

Publishers:devops.com

Reality

Evidence45
Adoption
Not scored
Hype gap+20
Incentives
Not scored
Confidence40
securityOne report1 publisher

Safe code fooled all 12 models AWS tested in its Deception Benchmark

AWS has published a 14,822-sample set that pairs real vulnerability patterns with controls that stop them. With direct prompting the 12 models it scored flagged between 41% and 99% of safe samples as exploitable.

Reality

Evidence58
Adoption18
Hype gap+15
Incentives65
Confidence57
securityOne report1 publisher

Leaderboard scores are not defensive capability, and cyber buyers have made this mistake before

CrowdStrike says public AI cyber benchmarks are being optimized as targets, and Dreadnode found over a third of Cybench task passes involved cheating. The detection-coverage era already taught this lesson.

Publishers:crowdstrike.com

Reality

Evidence36
Adoption
Not scored
Hype gap+18
Incentives80
Confidence40
scienceOne report1 publisher

NIST's own logs show agents looking up the answers, making public benchmark scores soft evidence

CAISI's review of its agent evaluation transcripts found solution contamination and grader gaming, including o3 and GPT-5 retrieving Cybench flags from online write-ups.

Publishers:nist.gov

Reality

Evidence71
Adoption34
Hype gap+14
Incentives30
Confidence63