safety benchmark
CyberGym is a benchmark for evaluating AI agents on cybersecurity tasks in a controlled environment.
Updated Sep 5, 2026
Higher score ranks better on this benchmark.
Rank | Model | Score | Percentile | Participants | Evidence | Evaluated |
|---|
| Rank01 | ModelGO | Score86.20% | Percentile100.00% | Participants15 | EvidenceC | Evaluated |
| Rank02 | ModelZA | Score84.50% | Percentile92.86% | Participants15 | EvidenceC | Evaluated |
| Rank03 | ModelDE | Score83.30% | Percentile85.71% | Participants15 | EvidenceC | Evaluated |
| Rank04 | ModelGO | Score83.20% | Percentile78.57% | Participants15 | EvidenceC | Evaluated |
| Rank05 | ModelAN | Score83.10% | Percentile71.43% | Participants15 | EvidenceC | Evaluated |
| Rank06 | ModelOP | Score81.80% | Percentile64.29% | Participants15 | EvidenceC | Evaluated |
| Rank07 | ModelAN | Score78.80% | Percentile57.14% | Participants15 | EvidenceC | Evaluated |
| Rank08 | ModelTE | Score78.40% | Percentile50.00% | Participants15 | EvidenceC | Evaluated |
| Rank09 | ModelDE | Score76.70% | Percentile42.86% | Participants15 | EvidenceC | Evaluated |
| Rank10 | ModelAN | Score73.80% | Percentile35.71% | Participants15 | EvidenceC | Evaluated |
| Rank11 | ModelAN | Score73.10% | Percentile28.57% | Participants15 | EvidenceC | Evaluated |
| Rank12 | ModelBY | Score70.20% | Percentile21.43% | Participants15 | EvidenceC | Evaluated |
| Rank13 | ModelZA | Score68.70% | Percentile14.29% | Participants15 | EvidenceC | Evaluated |
| Rank14 | ModelBY | Score67.00% | Percentile7.14% | Participants15 | EvidenceC | Evaluated |
| Rank15 | ModelMA | Score41.30% | Percentile0.00% | Participants15 | EvidenceC | Evaluated |
The leading models and scores on this benchmark.
A closer view of the leading scores on this benchmark.
The first five results on this benchmark, with official price and output speed added where the model identity can be matched.
What CyberGym measures and how its scores work.
CyberGym is a safety benchmark for evaluating AI agents on cybersecurity tasks.
It measures AI agents' ability to identify vulnerabilities, perform security analysis, and complete security-related challenges, reported as a Score ratio.
Scores are shown in ratio. This benchmark is not independently verified and has an evidence level of B.
LLM Stats. Benchmark scores retain their original unit. Overall score eligibility is shown separately.
Common questions about CyberGym.
Gemini 3.8 Flash Cyber is currently ranked first with 86.20%.
The current leaders are Gemini 3.8 Flash Cyber (86.20%), GLM-5.3 (84.50%), and DeepSeek-V4-Pro-0813 (83.30%).
DeepSeek-V4-Flash-0731 has the lowest matched official input price at $0.14 input / $0.28 output per 1M tokens.
The fastest matched records are GLM-5.3 (472.69 tok/s via FriendliAI), GPT-5.5 (134.94 tok/s via OpenAI), and Claude Opus 4.6 (123.15 tok/s via Anthropic).
No. This benchmark measures one defined capability or task. The overall LLMBoard score uses a separate aggregation across eligible benchmark evidence.
It measures AI agents' ability to identify vulnerabilities, perform security analysis, and complete security-related challenges, reported as a Score ratio.
Yes. Higher values rank better for this benchmark.
15 model results are currently shown.
No. This benchmark is shown for reference but does not contribute to the overall score.
Ranking basisThis cybergym AI model leaderboard uses descending score in the benchmark original unit. The leaderboard ranking keeps matched price and speed data separate from benchmark evidence.
Selection summary
Gemini 3.8 Flash Cyber currently leads CyberGym with 86.20%. It is the top model on this specific benchmark, while the best LLM for the broader task should also be checked against other benchmarks, price, and runtime.
Use this leaderboard with the supporting benchmark results and coverage details above. A leaderboard position summarizes the selected ranking signal; it does not replace workload-specific testing.