AIToday
Large Language ModelsAI Safety & AlignmentAI Business & IndustryTHE DECODERPublished: Oct 15, 2026, 01:00 JST

Artemis Security launches Orion-1, claims 80.8 vs 58.3

Artemis Security launches Orion-1, claims 80.8 vs 58.3

3 Key Points

  1. What happened

    Artemis Security launched Orion-1, which processes logs from auth services, cloud, endpoints, SaaS and network gear, and beat Claude Opus 5.5 and GPT-6 Sol on its own Decision-Grade Readiness benchmark, scoring 80.8 in attack reconstruction versus 58.3 for the next-best model.

  2. Why it matters

    Only Orion-1 scores at or above Artemis' self-defined 80-point threshold across all five tasks, and it is now in a private preview where customers set limits per action type and high-impact actions need human approval by default.

WHO IT HITSCorporate security operations teams get a new AI option for investigating and responding to attacks on their networks, though human approval is still required for high-impact actions by default.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Context & Analysis

Artemis Security only came out of stealth in April, disclosing $70 million from seed and Series A rounds about six months after the company was founded. Orion-1 is its attempt to address a problem the company describes: general-purpose models lose track when fed billions of events or flag harmless but odd activity as an attack. Artemis says it fine-tuned Orion-1 on tasks drawn from its own security operations, including spotting suspicious patterns in log data, hunting for known attack techniques, writing new detection rules, and containing live attacks.

The launch lands as security teams are finding broad frontier models harder to work with. OpenAI considers its Astra model the first that could reach the highest cybersecurity risk tier, where a model could develop and run cyberattacks on its own. Claude Opus 5.5 routes most cybersecurity tasks to the older Opus 4.8, and when Hugging Face tried in July to analyze a fully autonomous AI attack on its own infrastructure using commercial frontier models, their guardrails blocked the analysis of the attack data entirely. The team ended up switching to the open-weight model GLM 5.2 running on its own servers. For defense, providers are shipping specialized models with restricted access instead: OpenAI only hands out the less restricted GPT-5.5-Cyber to verified defenders, and Anthropic takes a similar approach with its strongest model, running Claude Mythos 5 through the Claude Security scanner and partner security products.

Artemis built its own benchmark for the comparison, called Decision-Grade Readiness. Most existing security tests quiz models on attack techniques or have them solve hacking puzzles, but DGR gives every model the same initial alert, the same environmental data, and the same tools a security team would have, then asks it to decide whether an attack is underway. The thousands of tasks all have known outcomes, and some contain no attack at all or include benign data designed to look malicious. Models are scored on both their verdict and the evidence they present. Artemis reports results across five tasks and tested Grok 4.7 and Kimi K3 alongside Opus 5.5 and GPT-6 Sol, though both Mythos 5 and OpenAI's strongest model, GPT-6 Astra, are missing from the comparison, and with Opus 5.5 the benchmark results may largely reflect answers from the older Opus 4.8.

FAQ
What are the key results for Orion-1?
Orion-1 scored 80.8 in attack reconstruction, compared to 58.3 for the next-best model, GPT-6 Sol. It is the only model scoring at or above Artemis' self-defined 80-point threshold across all five tasks.
How can customers access Orion-1?
Orion-1 is live in a private preview for select customers on the Artemis platform. Customers set limits per action type on how much the model can decide on its own, and high-impact actions need human approval by default.
Was customer data used to train Orion-1?
No customer data was used during training, according to Artemis Security.

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleEn-ping Lin doubts Micro LED links for AI data centers