Best of 11 security agents scores 68% pass@1, but fixed tests miss attack variants

krishnan · x · 2026-11-02

Krishnan cites CWE-bench's key numbers: the best of 11 tested agents scored 68% pass@1 and 81% pass@4 — benchmark scores, not the odds your production app is secure. Fixed tests can't rule out every attack variant: in 200 of 320 disagreements, judges that also probed variants rejected patches the tests passed.

Related event: CWE-bench Benchmarks AI Security Agents and Fix Validity(7 posts)→

Original post →

More from Safety

Safety channel →