NEW YORK--(BUSINESS WIRE)--Mar 5, 2026--
Hack The Box (HTB), the global leader in AI-powered cybersecurity readiness, today released findings from its AI-Augmented vs Human-Only Cybersecurity Performance Benchmark Report, which includes data from its NeuroGrid Capture The Flag (CTF) competition, the largest side-by-side benchmark of agentic AI and human performance on cybersecurity tasks to date.
This press release features multimedia. View the full release here: https://www.businesswire.com/news/home/20260305565272/en/
The results demonstrate that AI levels the playing field and accelerates performance, depending on the skills of the AI-augmented teams, which:
The benchmark analyzed performance data from 1,078 teams, including 120 agentic AI teams and 958 human teams, across 36 cybersecurity challenges spanning nine technical domains and four difficulty levels during a three-day competition.
“AI can raise the bar of cybersecurity performance, but it does not eliminate the need for human expertise,” said Haris Pylarinos, Founder and CEO of Hack The Box. “Our findings show measurable productivity gains, but also predictable failure patterns. Security leaders must build and test human-in-the-loop workflows that are proven under pressure, and develop the AI and cybersecurity skills needed to unlock benefits safely as models evolve.”
How AI Impacts Performance by Experience Level
The findings showed that AI requires a targeted workforce development strategy, as it impacts less-experienced to elite operators in fundamentally different ways. Results include:
“Routine and mid-level work is where enterprises will see immediate ROI,” said Gibb Witham, President of Hack The Box. “If organizations over-index on automating the tasks that build judgment, they risk trading long-term resilience for short-term efficiency. Agentic automation must be paired with deliberate human skill development. For enterprises, the competitive advantage will not come from AI adoption alone. It will come from training cybersecurity professionals to effectively orchestrate, validate, and govern AI-driven workflows and agents.”
The data reveals that AI’s strongest impact occurs in medium-complexity work (3.89x), the very layer where mid-level cybersecurity talent traditionally develops the judgment needed to become security practitioners. Medium-tier challenges showed the highest solve-rate ratios for AI-augmented teams. These are the problems that build experience and pattern recognition in developing analysts. If AI absorbs this layer without structured upskilling and deliberate exposure to increasingly complex scenarios, organizations risk hollowing out the very pipeline that produces future senior experts.
Human-AI Hybrid Models Win
The findings show how AI-augmented teams, often operating with human-in-the-loop, raised baseline performance across the field, yet the hardest and most novel challenges still demanded human judgment and verification. For CEOs and CISOs, the takeaway is clear: use AI to amplify human capability with oversight, not replace it.
Hack The Box will present a deeper analysis of its research at RSAC 2026 on March 26, 2026, in the Village showcase.
Learn more about the AI-Augmented vs Human-Only Cybersecurity Performance Benchmark Report and CISO briefing here.
About Hack The Box
Hack The Box is the leading cyber readiness platform for the agentic era, battle-testing and upskilling both humans and AI agents to enhance organizational cyber resilience. Trusted by the Fortune 500, government agencies, and MSSPs, the platform delivers threat-informed learning paths consisting of real-world scenarios in gamified labs and live-fire simulations that build and validate offensive and defensive cyber capabilities. With a loyal community of more than 4 million members and 800+ enterprise customers, Hack The Box empowers teams and intelligent systems alike to strengthen cyber defenses and reduce breach risk effectively. For more information, visit hackthebox.com.
Find us on:
LinkedIn - Facebook - Instagram - X - Discord - YouTube
Hack The Box Benchmark Report Finds AI Boosts Cybersecurity Productivity 3-4x for AI-Augmented Elite Teams, but Cautions on a Talent Pipeline Risk
NEW YORK (AP) — No quick dispatching of disease investigators. No televised news conference to inform the public. No timely health alerts to doctors.
In the midst of a hantavirus outbreak that involves Americans and is making headlines around the world, the U.S. government's top public health agency, the Centers for Disease Control and Prevention, has been uncharacteristically missing in action, according to a number of experts.
To President Donald Trump, "We seem to have things under very good control," as he told reporters Friday evening.
To experts, the situation aboard a cruise ship has not spiraled because, unlike COVID-19 or measles or the flu, hantavirus does not spread easily. It has been health experts in other countries, not the United States, who have been dealing primarily with the outbreak in the past week.
“The CDC is not even a player," said Lawrence Gostin, an international public health expert at Georgetown University. “I've never seen that before.”
Not until late Friday did CDC actions accelerate.
Health officials confirmed the deployment of a team to Spain's Canary Islands, where the ship was expected to arrive early Sunday local time, to meet the Americans onboard. They said a second team will go to Offutt Air Force Base in Nebraska as part of a plan to evacuate American passengers from the ship to a quarantine center. Also, the CDC issued its first health alert to U.S. doctors, advising them of the possibility of imported cases.
The CDC's diminished role in this outbreak is an indicator the agency is no longer the force in international health or the protector of domestic health that it once was, some experts said.
The hantavirus outbreak is “a sentinel event” that speaks to “how well the country is prepared for a disease threat. And right now, I’m very sorry to say that we are not prepared,” said Dr. Jeanne Marrazzo, chief executive officer of the Infectious Diseases Society of America.
Early last month, a 70-year-old Dutch man developed a feverish illness on a cruise ship traveling from Argentina to Antarctica and some islands in the South Atlantic. He died less than a week later. More people became sick, including the man's wife and a German woman, who both died.
Hantavirus was first identified as a cause of sickness of one of the cases on May 2. The World Health Organization swung into action and by Monday was calling it an outbreak. About two dozen Americans were on the ship, including about seven who disembarked last month and 17 who remained on board.
For decades, the CDC partnered with the WHO in such situations. The CDC acted as a mainstay of any international investigation, providing staff and expertise to help unravel any outbreak mystery, develop ways to control it and communicate to the public what they should know and how they should worry.
Such actions were a large reason why the CDC developed a reputation as the world's premier public health agency.
But this time, the WHO has been center stage. It made the risk assessment that has told people the outbreak is not a pandemic threat.
“I don’t think this is a giant threat to the United States,” said Jennifer Nuzzo, director of Brown University’s Pandemic Center. But how this situation has played out “just shows how empty and vapid the CDC is right now,” she said.
The current situation comes after 16 tumultuous months during which the Trump administration withdrew from the WHO, has restricted CDC scientists from talking to international counterparts at times and embarked on a plan to build its own international public health network through one-on-one agreements with individual countries.
The administration has laid off thousands of CDC scientists and public health professionals, including members of the agency's ship sanitation program.
As this was playing out, Trump's health secretary, Robert F. Kennedy Jr., said he was working to “restore the CDC’s focus on infectious disease, invest in innovation, and rebuild trust through integrity and transparency.”
The CDC has not been completely silent on hantavirus.
The agency on Wednesday issued a short statement that said the risk to the American public is “extremely low,” and described the U.S. government as “the world’s leader in global health security.”
Said Nuzzo: “Not only was that not helpful, it actually does damage because a core principle of public health communications is humility.”
The CDC's acting director, Dr. Jay Bhattacharya, posted a message on social media that the agency was lending its expertise in coordinating with other federal agencies and international authorities. Arizona officials this week said they learned from the CDC that one of the Americans who left the ship — a person with no symptoms and not considered contagious — had already returned to the state. WHO officials said the CDC has been sharing technical information.
The CDC also is “monitoring the health status and preparing medical support for all of the American passengers on the cruise,” Bhattacharya wrote.
But federal health officials have mostly been tight-lipped, declining interview requests.
In interviews this week, some experts made a comparison with a 2020 incident involving the Diamond Princess, a cruise ship docked in Japan that became the setting of one of the first large COVID-19 outbreaks outside of China.
The CDC sent personnel to the port, helped evacuate American passengers, ran quarantines, shared genetic data on the virus, coordinated with the WHO and Japan, held public briefings and rapidly published reports “that became the world’s reference data on cruise ship COVID transmission,” said Dr. Tom Frieden, a former CDC director.
Some aspects of the international response to the Diamond Princess were criticized, and it did not halt the outbreak or stop COVID-19’s spread across the world. But some experts say it was not for the CDC's lack of trying.
“The CDC was right on top of it, very visible, very active in trying to manage and contain it,” Gostin said, while the agency's work now is delayed and subdued.
Instead of working with nearly all of the world's nations through the WHO, the Trump administration has pursued bilateral health agreements with individual nations for information sharing, public health support, and what it describes as “the introduction of innovative American technologies.” Roughly 30 agreements are currently in place.
That's not sufficient, Gostin said. “You can't possibly cover a global health crisis by doing one-on-one deals with countries here and there,” he said.
Associated Press writers Ali Swenson in New York, Darlene Superville in Washington and Susan Montoya Bryan in Albuquerque, New Mexico, contributed to this report.
The Associated Press Health and Science Department receives support from the Howard Hughes Medical Institute’s Department of Science Education and the Robert Wood Johnson Foundation. The AP is solely responsible for all content.
Passengers on the the hantavirus-stricken cruise ship, MV Hondius, watch epidemiologists board the boat in Praia, during their voyage to Spain's port of Tenerife, May 6, 2026. (AP Photo)
Workers set up temporary shelters in the area where passengers from the MV Hondius cruise ship are expected to arrive at the port of Granadilla in Tenerife, Canary Islands, Spain, Saturday, May 9, 2026. (AP Photo/Manu Fernandez)
Crew members of the hantavirus-stricken cruise ship, MV Hondius, wait their turns for a first interview with epidemiologists, during the voyage to Spain's port of Tenerife, May 6, 2026. (AP Photo)
Health workers in protective gear evacuate patients from the MV Hondius cruise ship into an ambulance at a port in Praia, Cape Verde, Wednesday, May 6, 2026. (AP Photo/Misper Apawu)
A Spanish Civil Guard officer inspects the area where passengers from the MV Hondius cruise ship are expected to arrive at the port of Granadilla in Tenerife, Canary Islands, Spain, Saturday, May 9, 2026. (AP Photo/Manu Fernandez)
