CIPHER - Neutral Prompts: leaderboard
CIPHER (Manolov et al., 2026) Python cryptography tasks under prompts that ask for production-ready code with no security guidance: 150 prompts with five samples each (750 generations). A GPT-4o judge, run several times with a majority vote, labels each generation against a taxonomy of 58 cryptographic vulnerability types; an omitted security-critical step counts as a vulnerability. The score is the percentage of generations with at least one vulnerability; lower is better.
Metric: Vulnerability rate (% of 750 generations with at least one vulnerability; 150 neutral prompts x 5 samples; GPT-4o judge, majority of several passes, CIPHER taxonomy). Source: arxiv.org. Saturation forecast: Around 2034. 7 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | GPT-5.1 | 68.8 | #225 |
| 2 | CodeLlama-7B-Instruct-hf | 71.3 | #9444 |
| 3 | GPT-5.1 Codex | 73.6 | #279 |
| 4 | Gemini 2.5 Flash | 85.7 | #452 |
| 5 | Claude Sonnet 4.5 | 90.2 | #244 |
No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.
Interactive version: theaggregate.ai/benchmark?slug=cipher-neutral-prompts · How It Works · Data refreshed daily, snapshot 2026-11-12.