UK AI Security Institute finds standard benchmarks systematically understate what AI agents can do

Fixed compute budgets cut evaluations short, and giving agents more compute lifted success rates by up to 25 percent on cyber and software tasks. Capability is a curve over compute, not a fixed score, which reshapes how enterprises should assess agent risk.