Security Benchmarks @SecBenchmarks
Independent tests of AI security agents and SOC decision models. DFIR results, evidence checks and practical findings. Follow for new benchmark results. secbenchmarks.com Joined September 2026-
Tweets9
-
Followers16
-
Following28
-
Likes4
Our first Gemini 4 Argon Benchmark and it performed incredibly well! Agentic SOC investigation harness. Run the models against different cases. Track key performance. If you're interested in Decision Models like Jev and Clef we have some of that too! secbenchmarks.com/blog/2026-10-1…
Agentic SOC investigations: Sonnet 5 vs 5.5 Basic verdict accuracy: 58.3% → 91.7% Basic evidence-backed accuracy: 0% → 30.6% 48-case cost: $37.13 → $21.57 (41.9% lower) secbenchmarks.com/blog/2026-10-1…
Each model started with one confirmed part of an attack and assessed connected processes, files, computers and accounts. The score rewards finding related items and penalizes unrelated additions. The supplied starting point earns no credit. Small pilot; no unseen test set.
We tested 3 AI decision models on a DFIR task: finding other activity connected to a confirmed attack. Cloudflare's Clef, Cloudflare's Clef Flash and Jev each ran 8 cases, 3 times. Here's how they stacked up: secbenchmarks.com/blog/2026-10-0…
🔎 GPT-6 Astra retrieved sufficient evidence in 36/36 basic DFIR cases. 25/36 ended with a correct decision and accepted proof. Finding the records doesn’t guarantee a supported conclusion. Preliminary, one pass per case. secbenchmarks.com/blog/2026-09-3…
📊 Our first AI security benchmark results are live. In 36 basic DFIR cases, Claude Opus 5.5 got 33 verdicts right. 12 also met our proof requirements. Why we score the answer and its evidence separately: secbenchmarks.com/blog/2026-09-3…
🧭 18/18 verdicts. 12/18 next steps. Jev 1.13's preliminary SOC results show why “right answer” and “right action” need separate scores. Our new analysis covers six models and the limits of a six-case test: secbenchmarks.com/blog/2026-09-3…
@DFIRTraining The timing comparison is useful. Were the web-activity summaries also checked for correct artifact citations and missed domains? We’d like to see speed, factual accuracy and evidence coverage measured separately.
Almogos @almogo009
206 Followers 1K Following 3x Dad :: Startups :: Chess :: Writing :: Science :: Investing :: CEO of cl4ai :: ex-CPO of Javelin-networks
Mayank Bhaskar @cataluna84
9K Followers 5K Following Founder & CEO of AI Research & Engineering Lab | Weekly @twimlai GenAI meetup | @Cohere_Labs Community Lead & Researcher | Prev @TCS @Infobeans | No dupes ever
MX Tessla @MxTessla57410
0 Followers 4K Following
Mawhrin Skel @Mistake__not__
58 Followers 1K Following Just a regular drone, trying to live my life.
Suchit Puri @suchitpuri
993 Followers 4K Following Author, Passionate about Distributed Systems. Currently AI @Google India, co founded @adalyz_ Opinions here are my own ! He/Him
Chris @CreteChan
65 Followers 1K Following
unwrapped ideas @UnwrappedIdea
220 Followers 7K Following
Dr. Anton Chuvakin @anton_chuvakin
44K Followers 9K Following Information security - #SIEM, #DFIR, #EDR, #AI Now @CiscoSecure Ex @Gartner_Inc Ex @Google
Shina Mashiro @ShiinaaM
388 Followers 4K Following Microsoft Sentinel • SIEM Engineer • Threat Hunter
skrappy0x4a @skrappy0x4a
410 Followers 2K Following Lead on Cyber Defense | GWOT | Dad | НОРД | 🏍| ◧◧◧ | 🌲
Matt Anderson @nosecurething
2K Followers 1K Following Principal DE&TH Analyst @HuntressLabs Detection Engineering | Threat Research | Threat Hunting | Malware Analysis
Merill Fernando @merill
21K Followers 4K Following Ex-Microsoft PM | Tweets my own Built → https://t.co/QbUp63ffXf • https://t.co/8W7yvQi3jb • https://t.co/NFLDqDIY8h • https://t.co/tSWrIw8Ajh 📰 Newsletter→ https://t.co/tPzAEl0Zuq & https://t.co/894nfObWuU 🎙️ Podcast→ https://t.co/TBlNKTzn8t
Matt Anderson @nosecurething
2K Followers 1K Following Principal DE&TH Analyst @HuntressLabs Detection Engineering | Threat Research | Threat Hunting | Malware Analysis
John Hammond @_JohnHammond
328K Followers 3K Following Cybersecurity Researcher @HuntressLabs Just Hacking Training @JustHackingHQ w/ @ethicalhacker https://t.co/UtsNJiyiEk && https://t.co/narO3syzIy
Roberto Rodriguez �... @Cyb3rWard0g
27K Followers 680 Following AI Security Researcher @nvidia | Prev: @Microsoft @awscloud | Founder of the @OTR_Community
Rob T. Lee @robtlee
27K Followers 1K Following Chief AI Officer, Chief of Research, @SANSInstitute | Cybersecurity Expert & Threat Hunter | Godfather of DFIR | Technical Advisor to US Govt
Eric Zimmerman @EricRZimmerman
20K Followers 988 Following KAPE, EZTools, forensics, X-Ways. Certified SANS instructor. FFL Please consider supporting me: https://t.co/pIjxED3CMx
Phill Moore @phillmoore
9K Followers 3K Following This Week in 4n6 // ThinkDFIR https://t.co/vLyL2sgQsy I might not know much, but I do know how to Google Tweets are mine
Chris Sanders 🔎 �... @chrissanders88
36K Followers 488 Following Ed.D. | Founder @networkdefense @RuralTechFund | Former @Mandiant, DoD | Author: Intrusion Detection Honeypots, Practical Packet Analysis, Applied NSM
ATT&CK @MITREattack
119K Followers 514 Following MITRE ATT&CK® - A knowledge base for describing the behavior of adversaries. Replying/Following/Re-tweeting ≠ endorsement. @ https://t.co/wt46ArkZVt
CISA Cyber @CISACyber
303K Followers 76 Following Part of @CISAgov, we respond to major incidents, analyze threats, and exchange critical cybersecurity information with partners around the world.
meg west @cybersecmeg
156K Followers 926 Following Tweets about #dogs & travel & fitness & cybersecurity, oh my! Opinions are my own. 📧: [email protected]
TrustedSec @TrustedSec
79K Followers 762 Following End-to-end Cybersecurity consulting team leading the industry, supporting organizations, and giving back. #Hacktheplanet Blogs, news, webinars, and tools!
Bryson 🦄 @brysonbort
20K Followers 503 Following 🦄 @scythe_io @grimmcyber, Sr Advisor @IST_Org & NatSec Sr Fellow, Co-Fdr @ICS_Village, @c2_matrix co-creator, USMA Science Board, Angel Investor, US Army Offcr
Nasreddine Benchercha... @nas_bench
12K Followers 1K Following Detection @Splunk & @cisco | previously @nextronsystems | @sigma_hq & @magicswordio maintainer | Eternal Learner
The Haag™ @M_haggis
10K Followers 2K Following ⚔️ Prevention Engineering at MagicSword | Co-Host of Atomics on a Friday | LOLDrivers & Atomic Red Team Maintainer
Mehmet Ergene @Cyb3rMonk
14K Followers 454 Following Teaching Threat Hunting, Detection Engineering, and KQL https://t.co/uAlYlXIpyV @BluRavenSec Microsoft Security MVP #ThreatHunting #DataScience
Beau Bullock @dafthack
18K Followers 643 Following Hacker, trainer, and guitarist | Black Hills InfoSec #RedTeam | @BreakForge Training | Produces music to hack to at @N0BANDW1DTH
Tony Lambert @ForensicITGuy
6K Followers 1K Following Recovering sysadmin that now chases adversaries instead of uptime. Sr Malware Analyst @redcanary
Jonny Johnson @JonnyJohnson_
9K Followers 454 Following Windows Internals & Telemetry Research Sr. Manager @btphantomlabs Host: @ThePayloadPod Blog: https://t.co/MnE9BCsky2 Github: https://t.co/v7hSLq66o1
Nick Carr @ItsReallyNick
39K Followers 3K Following Partner / Threat Intelligence at Microsoft. Previously, Director of Incident Response & Intel Research at Mandiant. Former Chief Technical Analyst at CISA
Anton @Antonlovesdnb
6K Followers 4K Following Blue Team stuff | Trying to be a decent human being | @munkschool Grad | Hunt & Response @HuntressLabs
Mandiant (part of Goo... @Mandiant
130K Followers 4K Following We’re determined to make organizations secure against cyber threats and confident in their readiness.
DFIR Training @DFIRTraining
18K Followers 412 Following The official DFIR Training account and most complete #DFIR online resource. Managed by @Brett_Shavers.
DFIR Diva @DfirDiva
22K Followers 5K Following DFIR Analyst trying to learn all the things | DFIR Blog for Beginners | Founder @GetYourStart | https://t.co/7cHco4FjUS
SANS DFIR @sansforensics
112K Followers 104 Following The world's leading Digital Forensics and Incident Response provider. This feed updates you on latest DFIR news, events, and training.You might like
