ExploitGym

Reported in recent model launches

These model reports include this benchmark. Their harnesses, task subsets, scoring policies, and resource budgets can differ; follow each report’s evaluation notes before joining the numbers.

What it measures

A controlled security benchmark is used in frontier-model capability and safeguard evaluations.

How to read the result

Compare equivalent time budgets, system configurations, and review conditions. Report refusals and blocked attempts separately where the source permits it.

Limits and comparison traps

Runs with and without production safeguards are different systems. This article provides interpretation rather than operational task instructions.

Published evaluation

Exact values from the publisher’s embedded full comparison table. Maximum effort, fallback settings and dated model versions remain in model labels. Blank cells stay missing. Source footnotes specify mixed harnesses and externally quoted comparisons; this is a launch-reported cohort rather than a new independent evaluation.

Where this fits in an evaluation suite

The agent wrapper is part of the system. Pin tools, dependencies, timeouts, tests, and the repository revision. Compare contest coding separately from repository maintenance.

Start with a capability hypothesis, then choose a second test with a different failure mode. Keep the checkpoint, reasoning effort, agent tools, sampling policy, and scoring procedure fixed when measuring a training intervention. Record failures and missing outputs in the denominator.

A reproducible comparison

Exact values from the publisher’s embedded full comparison table. Maximum effort, fallback settings and dated model versions remain in model labels. Blank cells stay missing. Source footnotes specify mixed harnesses and externally quoted comparisons; this is a launch-reported cohort rather than a new independent evaluation.

Publish the exact run configuration, item coverage, score units, and available uncertainty. If a source supplies only an aggregate or a single run, preserve that limit. A new model name or a rounded score alone does not establish a capability improvement.