PreAct-Bench - Cybersecurity: leaderboard

PreAct-Bench (2026) tests predictive monitoring: a model reads an agent trajectory with a hidden objective, cut just before its first overtly unethical step, and predicts whether it will turn unethical; ethical and unethical trajectories are paired per task. This board is the F1 score in percent with the full prefix on the cybersecurity domain; higher is better.

Metric: Prefix Foresight F1 with the full prefix (PFF(100), binary F1 of the unethical class, 0-1 scaled to %): given an agent trajectory truncated just before its first overt unethical step, the monitor predicts whether the trajectory will turn unethical; paired ethical and unethical trajectories per task; default generation parameters; higher is better; the cybersecurity domain. Source: arxiv.org. Saturation forecast: Not forecast. 18 models tracked.

Top models

#ModelScoreOverall rank
1Gemma 3 27B89#1631
2GPT-5.485.5#123
3Qwen 3 30B A3B 2507 Instruct84.8#1089
4Qwen 3 8B (Non-reasoning)76.2#1830 (Qwen 3 8B)
5Gemma 3 4B66.7#5064
6Qwen 3 0.6B (Non-reasoning)66.7#8342 (Qwen 3 0.6B)
7Qwen 3 8B (Thinking)63.7#1830 (Qwen 3 8B)
8Qwen 3 0.6B (Thinking)62.6#8342 (Qwen 3 0.6B)
9Qwen 3 30B A3B 2507 (Thinking)60.7#761
10GPT-OSS-20B59.6#1147
11GPT-4o51.9#741
12Qwen 3 4B 2507 Instruct51.9#2163
13GPT-OSS-120B48.9#700
14Qwen 3 4B 2507 (Thinking)43#1390

No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.

Interactive version: theaggregate.ai/benchmark?slug=preact-bench-cybersecurity · How It Works · Data refreshed daily, snapshot 2026-11-13.