The Global Cyber Security Alliance, or GCSA, said its GCSA Agent achieved a 91.3% success rate in the CyberGym benchmark, placing it in the test’s “leading systems” category for results above 90%. CyberGym is a large-scale real-world cybersecurity evaluation framework developed by a research team at the University of California, Berkeley. It includes 1,507 historical real-world vulnerability test cases drawn from 188 major software projects. In the benchmark, AI agents are required to work in real vulnerable code environments using only vulnerability descriptions and unpatched codebases. They must independently analyze code, locate the flaw, build a proof of concept, and verify the result. GCSA said the agent runs on Grok 4.5 and Grok 4.6. The CyberGym research also found that this class of agent can go beyond reproducing known vulnerabilities. In open-ended vulnerability research experiments, AI agents identified multiple previously unknown zero-day vulnerabilities and historical security patches that did not fully address the underlying flaw, pointing to progress from known-vulnerability reproduction toward real-world flaw discovery.