GenIaC-SecBench - Complex (Median): leaderboard
Metric: Median vulnerability density (vulnerabilities per declared cloud resource in model-generated Infrastructure-as-Code across 100 deployment scenarios, scanned by Checkov, Trivy and KICS; lower is better (0 to unbounded; human-authored baseline median 1.00); complex multi-resource scenarios). Source: arxiv.org. Saturation forecast: Around December 2027. 12 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Claude Sonnet 4.6 | 0.49 |
| 2 | Claude Opus 4.6 (Thinking) | 0.65 |
| 3 | Claude Opus 4.6 | 0.68 |
| 4 | GPT-5 (High) | 1 |
| 5 | Gemini 3.7 Flash | 1.17 |
| 6 | GPT-5 | 1.25 |
| 7 | Gemini 3.1 Pro (Preview) | 1.65 |
| 8 | GPT-4o | 1.71 |
Interactive version: theaggregate.ai/benchmark?slug=geniac-secbench-complex-median · How It Works · Data refreshed daily, snapshot 2026-09-26.