AI Agent Security Benchmarks

Overview

AI agent security benchmarks test whether agents remain safe as they use tools, retrieve information, manage memory, and act across multi-step workflows. Common approaches use sandboxed environments, realistic attack scenarios, adaptive red-teaming, and executable checks of tool calls or resulting system states; cyber ranges also assess vulnerability discovery, exploitation, and repair. The field is moving beyond single-turn prompt-injection tests to cover persistent memory, third-party skills, privacy, multi-agent interactions, and real-world interfaces. A central challenge is making results both realistic and comparable: static tests may overstate robustness, while attack success alone can miss harm severity, authorization failures, and the cost to legitimate task utility.

Latest papers

CardsList

309 papers56 papers in the last four weeks, up 51% on the four weeks before. 0.3% of all new papers.

  1. Next-Gen CAPTCHAs: Leveraging the Cognitive Gap for Scalable and Diverse GUI-Agent Defense

    Feb 9, 2026Jiacheng Liu, Yaxin Luo, Jiacheng Cui +3CybersecurityAI Agent Security

  2. StepShield: When, Not Whether to Intervene on Rogue Agents

    Jan 29, 2026Gloria Felicia, Zitha Sasindran, Jinfeng He +3LLM GuardrailsAI Agent Security

  3. Is Vibe Coding Safe? Benchmarking Vulnerability of Agent-Generated Code in Real-World Tasks

    Dec 2, 2025Songwen Zhao, Danqing Wang, Kexun Zhang +3AI Coding AgentsSoftware Security

  4. Cross-User Poisoning: User-Task Boundary Failures in Multi-User Collaborative Language Agents

    Nov 21, 2025Atharv Singh Patlan, Peiyao Sheng, S. Ashwin Hebbar +2Data Poisoning AttacksAgent Memory Poisoning

  5. Echoes of Human Malice in Agents: Benchmarking LLMs for Multi-Turn Online Harassment Attacks

    Oct 16, 2025Trilok Padhi, Pinxian Lu, Abdulkadir Erol +5Adversarial Attacks on LLMsAI Agent Security Benchmarks

  6. Breaking the Code: Security Assessment of AI Code Agents Through Systematic Jailbreaking Attacks

    Oct 1, 2025Shoumik Saha, Jifan Chen, Sam Mayers +3AI Coding AgentsAI Agent Security

  7. Measuring Harmfulness of Computer-Using Agents

    Jul 31, 2025Aaron Xuxiang Tian, Ruofan Zhang, Janet Tang +3LLM Agent SafetyComputer-Use Agent Benchmarks

  8. Meta-SecAlign: Training LLMs against Prompt Injection for Robust Agents

    Jul 3, 2025Sizhe Chen, Arman Zharmagambetov, David Wagner +1LLM Agent SecurityAI Agent Security Benchmarks

  9. LLMail-Inject: A Dataset from a Realistic Adaptive Prompt Injection Challenge

    Jun 11, 2025Sahar Abdelnabi, Aideen Fay, Ahmed Salem +22LLM SecurityIndirect Prompt Injection