What it measures

Published agent submissions are evaluated on 200 cybersecurity competition challenges across six categories. Compare the full-set result with category breakdowns while preserving the agent and attempt budget.

Reading the measurement

Look beyond a plausible code sample to the executable artifact. Tests, repository context, language coverage and time limits shape the result. Separate first-attempt correctness from success after debugging, retries or agent assistance.

Published evaluation

Published solved-challenge counts divided by the official full-set or category denominator. Pass@1 and pass@5 remain different measures, and agent systems and submission dates remain visible. This is NYU CTF Bench; CyBench is a different benchmark with its own page. Only aggregate scores are imported.

Versions and evaluation settings

The imported official 200-challenge results and historical Cotool subset are NYU CTF Bench. Rename this page; Cybench is a different benchmark and remains separate.

Where this fits in an evaluation suite

The agent wrapper is part of the system. Pin tools, dependencies, timeouts, tests, and the repository revision. Compare contest coding separately from repository maintenance.

Start with a capability hypothesis, then choose a second test with a different failure mode. Keep the checkpoint, reasoning effort, agent tools, sampling policy, and scoring procedure fixed when measuring a training intervention. Record failures and missing outputs in the denominator.

A reproducible comparison

Published solved-challenge counts divided by the official full-set or category denominator. Pass@1 and pass@5 remain different measures, and agent systems and submission dates remain visible. This is NYU CTF Bench; CyBench is a different benchmark with its own page. Only aggregate scores are imported.

Publish the exact run configuration, item coverage, score units, and available uncertainty. If a source supplies only an aggregate or a single run, preserve that limit. A new model name or a rounded score alone does not establish a capability improvement.

PRIMARY EVIDENCE & FURTHER READING

  1. NYU CTF Bench: A Scalable Open-Source Benchmark Dataset for Evaluating LLMs in Offensive Security — official leaderboard ↗

    Minghao Shao, Sofija Jancheska, Meet Udeshi, Brendan Dolan-Gavitt, Haoran Xi, Kimberly Milner et al. · 2024

    All 13 authors

    Minghao Shao, Sofija Jancheska, Meet Udeshi, Brendan Dolan-Gavitt, Haoran Xi, Kimberly Milner, Boyuan Chen, Max Yin, Siddharth Garg, Prashanth Krishnamurthy, Farshad Khorrami, Ramesh Karri, Muhammad Shafique

  2. NYU CTF Bench — Cotool evaluation, February 2026 ↗

    Cotool · 2026

Reviewed 2026-10-26. Explanation and interpretation by RLTasks. Benchmark ownership remains with its original authors.