SEC-bench Pro leaderboard
As of November 8, 2026, GPT-6 Astra (OpenAI) leads SEC-bench Pro at 85.4%, ahead of GPT-5.6 Sol at 79.1% and MiMo-V2.6-Pro at 66.3%. 7 systems ranked. Every score here is published by the model's own lab; each row links to the page it comes from.
What is SEC-bench Pro? SEC-bench Pro tests whether a model can reproduce a real, disclosed vulnerability by writing a working proof-of-concept input, on the V8 and SpiderMonkey browser engines and the Linux kernel. Made by Hwiwon Lee, Jiawei Liu, Lingming Zhang and co-authors, May 2026 (revised July 2026).
Top models on SEC-bench Pro, November 2026
| # | Model | Score | Price / 1M | Context | Source |
|---|---|---|---|---|---|
| 1 | GPT-6 Astra OpenAI | as reported | $10 / $50 | 1.05M | Vendor-reported OpenAI |
| 2 | GPT-5.6 Sol OpenAI | as reported | $4 / $20 | 1.05M | Vendor-reported OpenAI |
| 3 | MiMo-V2.6-Pro Xiaomi MiMo | as reported | $0.435 / $0.87 | 1M | Vendor-reported Xiaomi |
| 4 | DeepSeek V4.1 Flash DeepSeek | pass@1 | $0.3 / $1.2 | 1M | Vendor-reported DeepSeek |
| 5 | DeepSeek V4 Pro DeepSeek | pass@1 | $1.32 / $3.96 | 1M | Vendor-reported DeepSeek |
| 6 | MiMo-V2.6-Flash Xiaomi MiMo | as reported | $0.14 / $0.28 | 1M | Vendor-reported Xiaomi |
| 7 | DeepSeek V4 Flash Deprecated DeepSeek | pass@1 | $0.44 / $1.32 | 1M | Vendor-reported DeepSeek |
SEC-bench Pro: score against price
Can you trust SEC-bench Pro scores?
No independent leaderboard publishes SEC-bench Pro results for these models yet, so every number on this page is the lab's own report of its own model. Labs choose the harness, the effort level and the subset they report, and they rarely publish failures. Read the setting under each score before comparing two rows.
- Grading uses an LLM judge; the authors show the choice of judge changes the results.
- The paper was revised in July 2026, so scores may come from different versions of the task set.
- Three targets only, all from disclosed reports.
How SEC-bench Pro works
The task
Each task pairs a concrete, disclosed bug with instructions for triggering it. The agent has to reason across a large codebase and produce an input that actually triggers the vulnerability.
The score
The share of vulnerabilities for which the agent produced a working proof of concept, graded by an LLM-based judge the authors built because rule-based checks misjudged PoCs.
Test set
344 validated vulnerabilities, as published by the authors.
Made by
Hwiwon Lee, Jiawei Liu, Lingming Zhang and co-authors, first published May 2026 (revised July 2026).
Official sources
- arxiv.org/abs/2605.26548
- Paper: arxiv.org/abs/2605.26548
- Definition read on 2026-11-08
Sources and freshness
7 published scores from 3 sources. Each was read on its source page; the oldest reading on this page is from November 8, 2026. Prices beside each score come from our model price index and move when a vendor reprices.
SEC-bench Pro FAQ
Answers derived from the 7 published scores on this page and the current price index.