{"id":"https://openalex.org/W7152705456","doi":"https://doi.org/10.48550/arxiv.2604.06367","title":"WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks","display_name":"WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks","publication_year":2026,"publication_date":"2026-04-07","ids":{"openalex":"https://openalex.org/W7152705456","doi":"https://doi.org/10.48550/arxiv.2604.06367"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.06367","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.06367","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.06367","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133247012","display_name":"Guruprasad Viswanathan Ramesh","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ramesh, Guruprasad Viswanathan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079194336","display_name":"Asmit Nayak","orcid":"https://orcid.org/0009-0005-7143-2892"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nayak, Asmit","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133267161","display_name":"Basieem Siddique","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Siddique, Basieem","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5042450214","display_name":"Kassem Fawaz","orcid":"https://orcid.org/0000-0002-4609-7691"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fawaz, Kassem","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.3224000036716461,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.3224000036716461,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.23260000348091125,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.12020000070333481,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.6703000068664551},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.59579998254776},{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.4052000045776367},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.3903000056743622},{"id":"https://openalex.org/keywords/simple","display_name":"Simple (philosophy)","score":0.3425000011920929},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.3418999910354614},{"id":"https://openalex.org/keywords/web-service","display_name":"Web service","score":0.3095000088214874}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8062000274658203},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.6703000068664551},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.59579998254776},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.49799999594688416},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44589999318122864},{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.4052000045776367},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.3903000056743622},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.3425000011920929},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.3418999910354614},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.3095000088214874},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.30630001425743103},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.296999990940094},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.290800005197525},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.2856000065803528},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.28040000796318054},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.25220000743865967},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.2513999938964844}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.06367","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.06367","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.06367","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.06367","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6472668051719666,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Web":[0],"agents":[1],"automate":[2],"browser":[3],"tasks,":[4,44,163],"ranging":[5],"from":[6,151],"simple":[7],"form":[8],"completion":[9],"to":[10,36,156],"complex":[11],"workflows":[12],"like":[13],"ordering":[14],"groceries.":[15],"While":[16],"current":[17,148],"benchmarks":[18],"evaluate":[19,119],"general-purpose":[20],"performance~(e.g.,":[21],"WebArena)":[22],"or":[23,54],"safety":[24],"against":[25],"malicious":[26],"actions~(e.g.,":[27],"SafeArena),":[28],"no":[29],"existing":[30],"framework":[31,67],"assesses":[32],"an":[33,65,115],"agent's":[34],"ability":[35],"successfully":[37],"execute":[38],"user-facing":[39],"website":[40,74,159],"security":[41,75,160],"and":[42,76,101,113,141,161,164,170],"privacy":[43,77,162],"such":[45],"as":[46],"managing":[47],"cookie":[48],"preferences,":[49],"configuring":[50],"privacy-sensitive":[51],"account":[52,100],"settings,":[53],"revoking":[55],"inactive":[56],"sessions.":[57],"To":[58],"address":[59],"this":[60],"gap,":[61],"we":[62,173],"introduce":[63],"WebSP-Eval,":[64],"evaluation":[66,145],"for":[68,182],"measuring":[69],"web":[70,124],"agent":[71,125,183],"performance":[72],"on":[73],"tasks.":[78],"WebSP-Eval":[79],"comprises":[80],"1)":[81],"a":[82,95,108,120,134,179],"manually":[83],"crafted":[84],"task":[85,89,139,168,191],"dataset":[86],"of":[87,122],"200":[88],"instances":[90],"across":[91,105,137,193],"28":[92],"websites;":[93],"2)":[94],"robust":[96],"agentic":[97],"system":[98],"supporting":[99],"initial":[102],"state":[103],"management":[104],"runs":[106],"using":[107,127],"custom":[109],"Google":[110],"Chrome":[111],"extension;":[112],"3)":[114],"automated":[116],"evaluator.":[117],"We":[118],"total":[121],"8":[123],"instantiations":[126],"state-of-the-art":[128],"multimodal":[129],"large":[130],"language":[131],"models,":[132],"conducting":[133],"fine-grained":[135],"analysis":[136],"websites,":[138],"categories,":[140],"UI":[142,176],"elements.":[143],"Our":[144],"reveals":[146],"that":[147],"models":[149],"suffer":[150],"limited":[152],"autonomous":[153],"exploration":[154],"capabilities":[155],"reliably":[157],"solve":[158],"struggle":[165],"with":[166,185],"specific":[167],"categories":[169],"websites.":[171],"Crucially,":[172],"identify":[174],"stateful":[175],"elements":[177],"are":[178],"primary":[180],"reason":[181],"failure,":[184],"toggles":[186],"causing":[187],"more":[188],"than":[189],"45%":[190],"failure":[192],"many":[194],"models.":[195]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-04-10T00:00:00"}