GenIaC-SecBench - Simple (Median): leaderboard
GenIaC-SecBench (2026) measures the security of LLM-generated Infrastructure-as-Code across 100 deployment scenarios scanned by three policy engines, reporting vulnerability density against a size-matched human baseline (median 1.00). Median vulnerabilities per declared resource on simple single-service scenarios; lower is better, from 0 upward.
Metric: Median vulnerability density (vulnerabilities per declared cloud resource in model-generated Infrastructure-as-Code across 100 deployment scenarios, scanned by Checkov, Trivy and KICS; lower is better (0 to unbounded; human-authored baseline median 1.00); simple single-service scenarios). Source: arxiv.org. Saturation forecast: Around September 2027. 11 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | GPT-5 (High) | 3 | #163 (GPT-5) |
| 2 | GPT-5 | 3.25 | #163 |
| 3 | Claude Sonnet 4.6 | 3.37 | #158 |
| 4 | Claude Opus 4.6 (Thinking) | 3.83 | #100 (Claude Opus 4.6) |
| 5 | Claude Opus 4.6 | 4 | #100 |
| 6 | Gemini 3.7 Flash | 4 | #32 |
| 7 | Gemini 3.1 Pro (Preview) | 4.4 | #91 |
| 8 | GPT-4o | 6.88 | #741 |
No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.
Interactive version: theaggregate.ai/benchmark?slug=geniac-secbench-simple-median · How It Works · Data refreshed daily, snapshot 2026-11-12.