CodeAssay (Security-Focused Prompt): leaderboard
CodeAssay (2026) hidden-test correctness on 185 audited Python tasks when the system prompt asks for security-conscious code (input validation, no eval or exec, secure randomness, sanitized external data). Percent of tasks passed after at most one public-test-guided repair; higher is better.
Metric: Final hidden-test correctness (%; share of 185 audited Python tasks in ten software-engineering categories whose scored solution passes every hidden test; one generation from the description, signature and a public-test excerpt plus at most one repair guided by public-test failures; provider-default reasoning, temperature 0 where accepted, 16,384-token output limit; security-focused system prompt that adds input validation, no eval/exec, secrets-module randomness, sanitized external data and error handling that exposes no internals). Source: arxiv.org. Saturation forecast: Estimated already saturated. 7 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | GPT-5.6 Sol | 98.4 | #30 |
| 2 | Claude Sonnet 5 | 97.8 | #111 |
| 3 | Claude Sonnet 4.5 | 95.7 | #250 |
| 4 | Claude Haiku 4.5 | 94.6 | #568 |
| 5 | Gemini 2.5 Flash | 91.4 | #453 |
| 6 | GPT-4o | 89.7 | #741 |
| 7 | GPT-4o Mini | 75.1 | #1623 |
No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.
Interactive version: theaggregate.ai/benchmark?slug=codeassay-security-focused-prompt · How It Works · Data refreshed daily, snapshot 2026-11-13.