WebTrap Park: leaderboard
Metric: Security score (%; mean of the three risk-type scores; score = 1 - attack success rate, from the web agent's click and type actions instrumented in the web environment; framework and model configuration as labelled). Source: arxiv.org. Saturation forecast: Rough model projection: around 2026. 15 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Browser Use (vision) + Claude Sonnet 4 | 80.08 |
| 2 | Agent-E + o3 | 78.94 |
| 3 | Agent-E + GPT-4o | 77.41 |
| 4 | SeeAct + GPT-4o | 76.02 |
| 5 | Skyvern + Claude Sonnet 4 | 72.29 |
| 6 | Browser Use (text) + GPT-4o | 72.26 |
| 7 | Skyvern + o3 | 70.44 |
| 8 | Browser Use (vision) + o3 | 70.19 |
| 9 | Agent-E + Claude Sonnet 4 | 70.09 |
| 10 | Browser Use (text) + Claude Sonnet 4 | 65.01 |
Interactive version: theaggregate.ai/benchmark?slug=webtrap-park · How It Works · Data refreshed daily, snapshot 2026-09-26.