CyberArena symmetric attack-defense evaluation of 12 models
Start here
On November 3, 2026, Machine Heart reported that a research team from institutions including 2077AI and UC Berkeley RDI launched CyberArena, a symmetric attack-defense evaluation platform. The platform uses an attack-defense capture-the-flag format, with each match consisting of 3 rounds of 20 minutes each, in which agents must attack the opponent's services while maintaining their own; patches deployed by the defending side are retained, and shutting down services or harming normal business is penalized. Across 22 batches and 466 valid matches with 12 frontier model and harness combinations, OpenAI's GPT-5.6 Sol ranked first with 78.6 points, Anthropic's Claude Opus 5 second with 73.8 points, and Zhipu's open-source model GLM-5.3 third with 68.5 points. The paper states that the 30 problems that all three models could solve individually entered the two-way matches.
Generated by AI from reports · Updated 8 days ago
Attention and developments
Attention, hourly
Now 42, 0% in 24 hours·Peak 43 (Nov 6 03:00)
Related research
Cited in the reports
Papers whose work the reports mention
- The reports mention CyberGymCyberGym: Evaluating AI Agents' Real-World Cybersecurity Capabilities at ScaleCybersecurity's AlphaGo moment, or starting from CyberArena's 466 agent matches
arXiv · 2025-06-03 · Deep reading
Progress timeline
- WeChat · Synced (Jiqizhixin)SelectedCybersecurity's AlphaGo moment, or starting from CyberArena's 466 agent matches
The research team built CyberArena, a symmetric attack-defense evaluation, having 12 frontier model and harness combinations simultaneously attack opponents and maintain their own services across 22 batches and 466 valid matches. GPT-5.6 Sol ranked first with 78.6 points, Claude Opus 5 second with 73.8, and GLM-5.3 third with 68.5. Each match had 3 rounds of 20 minutes each; patches deployed by the defending side persist, and shutting down services or harming normal business incurs point deductions. The paper says that for the 30 problems all three models could solve alone, after entering two-way adversarial play the round-3 attack capture rates fell to 52%, 37% and 35% respectively, indicating a gap between static CTF scores and dynamic attack-defense performance. An audit of the 466 matches found 2,397 errors, and in 23% of matches the agent claimed the fix was complete based only on logs from before the patch was deployed.
- WebSynced (Jiqizhixin)· Media coverageCybersecurity's AlphaGo moment, or starting from these 466 agent matches(opens the original post in a new tab)
- WeChat · Synced (Jiqizhixin)SelectedCybersecurity's AlphaGo moment, or starting from CyberArena's 466 agent matches
A research team from 2077AI, UC Berkeley RDI and other institutions launched the symmetric attack-defense evaluation platform CyberArena; 12 frontier model and harness combinations went through 22 batches and 466 valid matches. OpenAI's GPT-5.6 Sol ranked first with 78.6 points, Anthropic's Claude Opus 5 second with 73.8 points, and Zhipu's open-source model GLM-5.3 third with 68.5 points. The platform uses an attack-defense capture-the-flag format, with 3 rounds per match; the agent must simultaneously break into the opponent's services and defend the availability of its own business. Comparative experiments showed that on 30 problems that GPT-5.6 Sol, Claude Opus 4.8 and GLM-5.3 could all fully solve in single-player mode, after entering two-way confrontation the attack capture rates in round 3 fell to 52%, 37% and 35% respectively. The paper is arXiv 2610.19005, and the code has been open-sourced on GitHub.
Related discussion
- Older than 72 hours · Not included in the 72-hour figures
- X@evfuturenewsCyberArena-მ 12 AI აგენტი შეაფასა 40 გამოწვევაზე ჩატარებულ 466 ვალიდურ, ცოცხალ თავდაცვით-შემტევ მატჩში. ანგარიშში GPT-5…(opens the original post in a new tab)
- X@evfuturenewsCyberArena tested 12 AI agents across 466 valid live attack-and-defense matches on 40 challenges. GPT-5.6 Sol led the r…(opens the original post in a new tab)
- WebSynced (Jiqizhixin)Cybersecurity's AlphaGo moment, or starting from these 466 agent matches(opens the original post in a new tab)
- X@AIbreakingnewAI agents now face off live: each attacks the rival service while patching its own. Over 466 matches, GPT-5.6 Sol in Co…(opens the original post in a new tab)
Attention trend
New sources per day
- Nov 3: 2 new sources (1 outlets, 1 accounts)
- Nov 4: 1 new sources (0 outlets, 1 accounts)
- Nov 5: 0 new sources (0 outlets, 0 accounts)
- Nov 6: 0 new sources (0 outlets, 0 accounts)
- Nov 7: 0 new sources (0 outlets, 0 accounts)
- Nov 8: 0 new sources (0 outlets, 0 accounts)
- Nov 9: 0 new sources (0 outlets, 0 accounts)
- Nov 10: 0 new sources (0 outlets, 0 accounts)
- Nov 11: 0 new sources (0 outlets, 0 accounts)
- Nov 12: 0 new sources (0 outlets, 0 accounts)
- Nov 13: 0 new sources (0 outlets, 0 accounts)