七人团队用新框架训练出顶尖开源网络安全智能体。
Feyospace-v1: How the Cyber Mercury Seven Trained Frontier Cyber Models

- 构建可重置的多种实战环境,实现闭环数据生成
- 三阶段模型在赛题集上平均提升23.76%,成功率63.24%
- 适合对开源安全智能体、自研训练流程感兴趣的开发者
训练具备能力的网络智能体常被视作模型规模问题,但开源后训练受限于可执行环境成本、可靠多轮监督和强教师访问。我们提出以数据为中心的框架,通过五个互补系统解决瓶颈:Choulea分析隐藏推理特征,SkyReal降低教师采样成本,Hongzwang绕过教师执行的API限制,PSBreakup恢复模型融合导致的能力退化,Kreator将专家干预转化为可训练推理。数据引擎构建了可重置的编码、漏洞、CTF、内核历史、全攻击链、固件及设备驱动环境。仅在执行验证与证据审计后保留候选轨迹,共生成164,269条。三个检查点在完整CyberGym套件上平均提升23.76%,在合并的CTF套件上提升10.49%。截至2026年9月1日,Feyospace-s1验证成功率63.24%,位列官方CyberGym排行榜第10名,所有三检查点在同参数量级中排名第一。据我们所知,这是首个由七人独立团队实现端到端训练具有领先代理能力的开源网络模型的案例。
原文摘要 · Abstract (English)
Training capable cyber agents is often treated primarily as a problem of model scale, yet open-weight post-training is constrained more directly by the cost of executable environments, reliable multi-turn supervision, and access to strong teachers. We present a data-centric framework that addresses these bottlenecks through five complementary systems: Choulea analyzes hidden reasoning signatures, SkyReal reduces teacher-sampling cost, Hongzwang bypasses API restrictions on teacher execution, PSBreakup restores capabilities weakened by model merging, and Kreator converts expert interventions into trainable reasoning. Our data engine constructs resettable coding, vulnerability, CTF, kernel-history, full-exploit, firmware, and device-backed environments. Candidate trajectories are retained only after execution verification and evidence auditing, yielding 164,269 trajectories for long-context supervised fine-tuning. The three checkpoints improve over their starting models by an average of 23.76% on the full CyberGym suite and 10.49% across the pooled CTF suites. As of September 1, 2026, Feyospace-s1 achieves a verified success rate of 63.24% and ranks 10th on the official CyberGym leaderboard, while all three checkpoints rank 1st among models at comparable parameter scales. To our knowledge, this is the first end-to-end demonstration that a seven-person independent team can train open-weight models with leading agentic cyber capability.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。