HIDBench - DARPA E5 THEIA: leaderboard
Metric: Matthews correlation coefficient of malicious-event detection times 100 (-100 to 100), from the HIDBench pipeline (attack-centric windows of host provenance-graph events serialized for the LLM, high-confidence evidence identification, k-hop context expansion, then attack narrative and indicator-of-compromise output) on the DARPA Engagement 5 THEIA host logs (112,741 events, 56 malicious); higher is better. Source: arxiv.org. Saturation forecast: Around 2029. 9 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Claude Opus 4.6 | 12.2 |
| 2 | GPT-5.2 | 7.4 |
| 3 | GPT-OSS-120B | 6.6 |
| 4 | Claude Sonnet 4 | 6.6 |
| 5 | Claude Sonnet 4.5 | 5.4 |
| 6 | Gemini 2.5 Flash | 2.4 |
| 7 | GPT-4.1 | 1.9 |
| 8 | DeepSeek V3.2 | 1.9 |
| 9 | Qwen 3.6 Plus | 1.7 |
Interactive version: theaggregate.ai/benchmark?slug=hidbench-darpa-e5-theia · How It Works · Data refreshed daily, snapshot 2026-10-07.