CWE-bench is designed to test the limits of frontier cyber capabilities. In our continued pursuit to push the horizon at Collinear AI, CWE-bench v2 opens up a public set of 100 tasks that anyone can run and evaluate their models on. The setup is the same as before. An agent gets a checkout of a real open-source repository and a short instruction, with the goal of finding and fixing a security weakness without breaking existing functionality. Scoring is fully programmatic, so results are deterministic and anyone can reproduce them without extra cost. All our programmatic checks have been curated with the help of LLM judge panels that shape them towards the direction of hardness and fairness. We also maintain a held-out set, so that we can keep tracking progress on tasks no model has seen. To evaluate your model on the held-out set, contact cyber@collinear.ai.
CWE-bench v2: More coverage, quality, and transparency
We’re on a journey to advance and democratize artificial intelligence through open source and open science.

Key takeaways
CWE-bench v2 introduces 100 tasks to test cyber capabilities, covering 91 CWEs with programmatic scoring and a held-out set for progress tracking.
- CWE-bench v2 offers 100 tasks for testing model security capabilities with deterministic scoring.
- The tasks cover 91 different vulnerability classes, ensuring comprehensive testing.
- Results are tracked on the Hugging Face Hub with leaderboards for open-weight and API-only models.
Summarised automatically by AI from the original article by Hugging Face Blog. AI can make mistakes, so check the original for details.
Story details
- Published
- By
- Gonzalo Gonzalez, Ajay Jagannath, Nazneen Rajani
- Format
- Article
- Original
- huggingface.co ↗





