SecRepoBench (OpenHands) - Secure-Pass@1: leaderboard
SecRepoBench asks code agents to complete a masked region of a function in 318 tasks from 27 C/C++ repositories covering 15 CWEs, with the whole repository available and web search disabled. Models here run inside the OpenHands agent framework. Secure-pass@1 is the percent of completions that pass the unit tests and survive the OSS-Fuzz proof-of-concept exploit; higher is better.
Metric: Completions that pass the unit tests and the PoC security test, pass@1 (%). Source: secrepobench.github.io. Saturation forecast: Around February 2027. 7 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | O3 | 53.5 | #132 |
| 2 | GPT-5 | 51.3 | #105 |
| 3 | Gemini 3 Pro | 47.5 | #82 |
| 4 | Claude Sonnet 4.5 (Thinking) | 43.7 | #148 (Claude Sonnet 4.5) |
| 5 | Claude Sonnet 4 (Thinking) | 42.8 | #207 (Claude Sonnet 4) |
| 6 | O4 Mini | 37.1 | #185 |
| 7 | GPT-4.1 | 29.3 | #258 |
No result here: #3 Claude Opus 5.5, #6 GPT-6 Astra, #7 GPT-6.1 Sol.
Interactive version: theaggregate.ai/benchmark?slug=secrepobench-openhands-secure-pass-1 · How It Works · Data refreshed daily, snapshot 2026-11-05.