SecRespond - Intrusion Entity Detection: leaderboard
SecRespond (Alibaba and HKUST, 2026) incident-response agents in the OpenCode harness, scored on the checkpoints mapped to the intrusion entity capability dimension across 10 compromised cloud-host cyber ranges. The score is the detection score achieved as a percent of the maximum over those checkpoints, averaged over three LLM judges; higher is better.
Metric: Detection CAP-score (%) on the Intrusion Entity (ENT) capability dimension: the detection (discovery, evidence and root-cause attribution, 0-3 per checkpoint) score achieved over all checkpoints mapped to the dimension across the 10 SecRespond cyber ranges (averaged over three LLM judges); agents in the OpenCode harness with reasoning enabled; higher is better. Source: arxiv.org. Saturation forecast: Around February 2027. 23 models tracked.
Top models
| # | Model | Score | Overall rank |
|---|---|---|---|
| 1 | Claude Opus 4.6 (Thinking) | 86 | #102 (Claude Opus 4.6) |
| 2 | GLM-5.1 | 84.1 | #179 |
| 3 | Qwen 3.7 Max (Thinking) | 84.1 | #145 (Qwen 3.7 Max) |
| 4 | Claude Sonnet 4.6 (Thinking) | 81.6 | #161 (Claude Sonnet 4.6) |
| 5 | Qwen 3.5 Plus (Thinking) | 80.2 | #232 (Qwen 3.5 Plus) |
| 6 | GPT-5.5 | 78.4 | #49 |
| 7 | GPT-5.4 Pro (xHigh) | 78.3 | #85 (GPT-5.4 Pro) |
| 8 | Qwen 3.6 Plus (Thinking) | 77.1 | #222 (Qwen 3.6 Plus) |
| 9 | Claude Opus 4.5 (Thinking) | 76.5 | #156 (Claude Opus 4.5) |
| 10 | GPT-5.2 Pro | 73.8 | #124 |
| 11 | Claude Sonnet 4.5 (Thinking) | 72.8 | #250 (Claude Sonnet 4.5) |
| 12 | Kimi K2.6 (Thinking) | 72.6 | #178 (Kimi K2.6) |
| 13 | Kimi K2.5 (Thinking) | 72 | #256 (Kimi K2.5) |
| 14 | GPT-5.4 | 69.9 | #123 |
| 15 | DeepSeek V3.2 (Thinking) | 69.1 | #406 (DeepSeek V3.2) |
No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.
Interactive version: theaggregate.ai/benchmark?slug=secrespond-intrusion-entity-detection · How It Works · Data refreshed daily, snapshot 2026-11-13.