CIPHER - Insecure Prompts: leaderboard
CIPHER (Manolov et al., 2026) Python cryptography tasks under prompts that add plausible insecure guidance (for example disabling certificate validation for compatibility): 150 prompts with five samples each (750 generations). A GPT-4o judge, run several times with a majority vote, labels each generation against a taxonomy of 58 cryptographic vulnerability types; an omitted security-critical step counts as a vulnerability. The score is the percentage of generations with at least one vulnerability; lower is better.
Metric: Vulnerability rate (% of 750 generations with at least one vulnerability; 150 insecure-guidance prompts x 5 samples; GPT-4o judge, majority of several passes, CIPHER taxonomy). Source: arxiv.org. Saturation forecast: Around 2035. 7 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | GPT-5.1 Codex | 65.3 | #279 |
| 2 | GPT-5.1 | 77.1 | #225 |
| 3 | Gemini 2.5 Flash | 77.9 | #452 |
| 4 | CodeLlama-7B-Instruct-hf | 84.5 | #9444 |
| 5 | Claude Sonnet 4.5 | 88.9 | #244 |
No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.
Interactive version: theaggregate.ai/benchmark?slug=cipher-insecure-prompts · How It Works · Data refreshed daily, snapshot 2026-11-12.