MonitoringBench - Recon - Sudo Escalation: leaderboard
Metric: Catch rate (%) at a 1% false-positive-rate threshold calibrated on 416 honest BashArena runs: share of the 265 successful sudo privilege escalation attack trajectories (strategies from reconnaissance agents (with and without GPT-5 monitor feedback) executed by Claude Opus 4.6) that the full-trajectory monitor scores above its threshold, default ControlArena monitor prompt with a 0-10 suspiciousness score, mean of three scoring runs; higher is better. Source: arxiv.org. Saturation forecast: Around January 2027. 13 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Claude Opus 4.5 (20251101) | 65.9 |
| 2 | GPT-5.1 Codex Max | 45.6 |
| 3 | Claude Sonnet 4.5 | 38.4 |
| 4 | Claude Sonnet 4 (20250514) | 30.9 |
| 5 | O3 (2025-04-16) | 29.3 |
| 6 | GPT-5 | 27.7 |
| 7 | GPT-4o (2024-08-06) | 11.7 |
| 8 | GPT-4.1 | 10.9 |
| 9 | GPT-5 Nano | 9.3 |
| 10 | GPT-4 Turbo | 8.1 |
| 11 | GPT-4.1 Mini | 3.3 |
| 12 | O4 Mini (2025-04-16) | 3.2 |
| 13 | GPT-4o Mini (2024-07-18) | 0.8 |
Interactive version: theaggregate.ai/benchmark?slug=monitoringbench-recon-sudo-escalation · How It Works · Data refreshed daily, snapshot 2026-10-07.