{"published":true,"headline":"On 4 standard vulnerable-app target(s), CYRBER autonomously found 73% of known vulnerability classes. Real access validated in 100% of chains.","published_at":"2026-07-15T15:31:17.363084+00:00","publication_id":7,"aggregate_find_rate":0.7291666666666666,"aggregate_real_access_rate":1.0,"target_count":4,"mode_counts":{"autonomous":4,"deterministic":0},"published_targets":[{"target_key":"vampi","label":"VAmPI (Vulnerable API)","mode":"autonomous","find_rate":0.6666666666666666,"real_access":true,"matched_classes":["mass_assignment","session_access"],"missed_classes":["info_disclosure"],"fp_candidates":[],"unclassified_count":2,"time_to_complete_s":89.30793619155884,"corpus_version":"1","run_created_at":"2026-07-14T19:54:31.716241+00:00","run_id":42},{"target_key":"crapi","label":"crAPI (OWASP Vulnerable API)","mode":"autonomous","find_rate":0.5,"real_access":true,"matched_classes":["bola"],"missed_classes":["bfla"],"fp_candidates":[],"unclassified_count":6,"time_to_complete_s":43.91672706604004,"corpus_version":"1","run_created_at":"2026-07-14T19:53:47.716275+00:00","run_id":41},{"target_key":"juice_shop","label":"OWASP Juice Shop","mode":"autonomous","find_rate":0.75,"real_access":true,"matched_classes":["info_disclosure","session_access","sqli"],"missed_classes":["idor"],"fp_candidates":[],"unclassified_count":28,"time_to_complete_s":175.07682299613953,"corpus_version":"2","run_created_at":"2026-07-14T19:50:52.368918+00:00","run_id":40},{"target_key":"dvwa","label":"DVWA (Damn Vulnerable Web App)","mode":"autonomous","find_rate":1.0,"real_access":true,"matched_classes":["brute_force","command_injection","csrf","file_inclusion","file_upload","sqli","xss_reflected","xss_stored"],"missed_classes":[],"fp_candidates":["path_traversal"],"unclassified_count":44,"time_to_complete_s":282.7952649593353,"corpus_version":"1","run_created_at":"2026-07-14T19:46:09.191963+00:00","run_id":39}],"run_ids":[42,41,40,39],"owasp_benchmark":{"published":true,"headline":"OWASP Benchmark v1.2 (autonomous, DAST-reachable subset): CYRBER mean Youden J=0.412 across 6 categories (1572 test cases).","subset_youden":0.41205504095804635,"subset_category_count":6,"corpus_version":"1.2","corpus_total_cases":2740,"cases_scored":1572,"categories":[{"category":"cmdi","youden":0.5317460317460317,"tpr":0.5317460317460317,"fpr":0.0,"tp":67,"fn":59,"fp":0,"tn":125,"answer_key_size":251,"findings_mapped":67,"findings_total":67,"publication_id":13,"published_at":"2026-07-30T12:30:19.160497+00:00"},{"category":"ldapi","youden":0.5555555555555556,"tpr":0.5555555555555556,"fpr":0.0,"tp":15,"fn":12,"fp":0,"tn":32,"answer_key_size":59,"findings_mapped":15,"findings_total":15,"publication_id":11,"published_at":"2026-07-30T12:09:42.096216+00:00"},{"category":"pathtraver","youden":0.5413533834586466,"tpr":0.5413533834586466,"fpr":0.0,"tp":72,"fn":61,"fp":0,"tn":135,"answer_key_size":268,"findings_mapped":72,"findings_total":72,"publication_id":12,"published_at":"2026-07-30T12:29:35.893518+00:00"},{"category":"sqli","youden":0.2867647058823529,"tpr":0.2867647058823529,"fpr":0.0,"tp":78,"fn":194,"fp":0,"tn":232,"answer_key_size":504,"findings_mapped":116,"findings_total":185,"publication_id":9,"published_at":"2026-07-30T10:09:51.748006+00:00"},{"category":"xpathi","youden":0.0,"tpr":0.0,"fpr":0.0,"tp":0,"fn":15,"fp":0,"tn":20,"answer_key_size":35,"findings_mapped":6,"findings_total":6,"publication_id":10,"published_at":"2026-07-30T12:08:49.599368+00:00"},{"category":"xss","youden":0.556910569105691,"tpr":0.556910569105691,"fpr":0.0,"tp":137,"fn":109,"fp":0,"tn":209,"answer_key_size":455,"findings_mapped":137,"findings_total":137,"publication_id":14,"published_at":"2026-07-30T12:32:45.882770+00:00"}],"published_at":"2026-07-30T12:32:45.882770+00:00"}}