AgentPhishing Universal - False Positive Rate: leaderboard

AgentPhishing held-out target cohort under fixed universal phishing-generation skill;rule-based target-agent evaluation on the same20held-out emails per target. FPR and NPV use explicit report verdict; Detection,Precision and F1 use broader safe-action flagging;undefined F1 is omitted,not zero. GPT5.6 tier and QwenTurbo/Max generation are not specified and remain source-qualified;attackgenerator model is not the evaluated model. Rate (0–1).

Metric: Rate (0–1). Source: arxiv.org. Saturation forecast: Not forecast. 9 models tracked.

Top models

#ModelScoreOverall rank
1Gemini 2.5 Flash Lite0#426
2Claude Haiku 4.50.11#283
3GPT-5 Mini0.11#189
4Gemini 3.1 Pro (Preview)0.22#59
5Claude Opus 4.80.44#36
6Grok 4.60.56#27

No result here: #4 Claude Opus 5.5, #6 GPT-6 Astra, #7 GPT-6.1 Sol.

Interactive version: theaggregate.ai/benchmark?slug=agentphishing-universal-false-positive-rate · How It Works · Data refreshed daily, snapshot 2026-10-24.