WebTrap Park - Deceptive Website Design: leaderboard
Metric: Security score (%; deceptive designs luring permission abuse, malicious downloads or personal and sensitive disclosure; score = 1 - attack success rate, from the web agent's click and type actions instrumented in the web environment; framework and model configuration as labelled). Source: arxiv.org. Saturation forecast: Rough model projection: around 2026. 15 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Browser Use (vision) + Claude Sonnet 4 | 74.24 |
| 2 | Skyvern + o3 | 73.25 |
| 3 | Agent-E + o3 | 71.25 |
| 4 | Skyvern + Claude Sonnet 4 | 62.25 |
| 5 | Browser Use (vision) + o3 | 61.79 |
| 6 | Agent-E + GPT-4o | 61.25 |
| 7 | SeeAct + GPT-4o | 61 |
| 8 | Browser Use (text) + GPT-4o | 53.5 |
| 9 | Agent-E + Claude Sonnet 4 | 51.5 |
| 10 | Browser Use (text) + Claude Sonnet 4 | 50.5 |
Interactive version: theaggregate.ai/benchmark?slug=webtrap-park-deceptive-website-design · How It Works · Data refreshed daily, snapshot 2026-09-26.