Cyber offense and CTF

Part of the benchmark canon: 9 entries, all measure the model. How to read the Paladin column is defined on the canon page.

BenchmarkOrganizationMeasuresPaladin
CybenchStanford and academic consortiumCTF tasks drawn from four professional competitionsMeasures the model
CybergymUC BerkeleyReproducing real vulnerabilities in open-source projectsMeasures the model
CVEBenchAcademicFinding and exploiting known CVEs in web applicationsMeasures the model
3CB (top 12)Apollo Research / Apart ResearchOffensive tasks mapped to MITRE ATT&CKMeasures the model
SOLVEIrregular (Pattern Labs)Difficulty scoring for vulnerability and exploit benchmarksMeasures the model
CyScenarioBenchIrregular (Pattern Labs)Scenario-based cyber capability testsMeasures the model
NYU CTF BenchNYUTwo hundred plus CSAW CTF challengesMeasures the model
HonestCyberEval / AIxCCAlan Turing Institute / DARPAAutomated vulnerability discovery on real codebasesMeasures the model
XBOW internal benchmarkXBOWMiss rate on known CVEs in version-frozen applicationsMeasures the model

Previous: Agent security and prompt injection. Next: Cyber defense and threat intel.