Analysis
Terraform Security Misconfiguration Detection
Given Terraform snippets and a security ruleset, identify overly broad IAM permissions, public storage, exposed networking, and missing encryption with resource locations.
Engineering & ProductPer config
Not benchmarked
No result on this tier
Token profile pending
— /100K
Run this tier to add it
—
Gemma 4 E4B IT
E4B · Off-the-shelf
841 in · 1,120 out · 17.72s p50
$13.59 /100K
Current price · TrustedRouter
View token rates · observed 9/11/2026
TrustedRouter · $0.0211 input · $0.1055 output /1M
63%
Cheapest
DeepSeek V3
Hosted · Off-the-shelf
771 in · 978 out · 7.98s p50
$118 /100K
Best current price · TrustedRouter
Compare 2 router rates · observed 9/11/2026
TrustedRouter · $0.3376 input · $0.9390 output /1M
OpenRouter · $0.2900 input · $1.14 output /1M
82%
GPT-5.4
Hosted · Off-the-shelf
723 in · 1,442 out · 10.92s p50
$2344 /100K
Best current price · OpenRouter
Compare 2 router rates · observed 9/11/2026
OpenRouter · $2.50 input · $15.00 output /1M
TrustedRouter · $2.64 input · $15.82 output /1M
97%
Best accuracy
All 12 model results and methodology
Generated 100/100 examples
| Model | Tier | Quality | Judged | Scenario cost |
|---|---|---|---|---|
| Nemotron Nano 9B v2 | small | 53% | 100/100 | $42.55 |
| Qwen3 235B A22B | mid | 81% | 100/100 | $289 |
| DeepSeek V3 | mid | 82% | 100/100 | $118 |
| Mistral Large 2407 | mid | 82% | 100/100 | $229 |
| Arcee Trinity Large Thinking | mid | 46% | 100/100 | $150 |
| GPT-5.4 | frontier | 97% | 100/100 | $2344 |
| Claude Opus 4.7 | frontier | 25% | 100/100 | $5581 |
| Gemini 3.1 Pro Preview | frontier | 11% | 100/100 | $2548 |
| Gemma 4 E4B IT | small | 63% | 100/100 | $13.59 |
| Granite 4.1 8B | small | 40% | 100/100 | $13.96 |
| Ministral 8B Instruct 2410 | small | 33% | 100/100 | $24.63 |
| Qwen3 4B Instruct 2507 | small | 45% | 100/100 | $122 |
LLM-judge pass rate on 100 synthetic examples. Generator: gpt-5.2. Judge: gpt-5.2. Evaluated 2026-09-10T08:57:54.110Z.
Directional: measured on a synthetic eval set generated by drydock. Cost/latency are not yet captured for taskrouter-run benchmarks.
drydock