WAREX: Web Agent Reliability Evaluation on Existing Benchmarks
On the map: LLM agents and tool use → Web, search, and research agents
Abstract (arXiv)
Recent advances in browser-based LLM agents have shown promise for automating tasks ranging from simple form filling to hotel booking or online shopping. Current benchmarks measure agent performance in controlled environments, such as containers or stable networks, where websites behave deterministically. However, in the real world, users access websites over networks and HTTPS connections that introduce instability from multiple sources: client-side, server-side issues or broader system failures. Moreover, live websites are prone to web attacks such Cross-Site Scripting, as well as general site modifications which can cause unexpected or malicious pop-ups or improper functionality. To address this gap, we present WAREX: Web Agent Reliability Evaluation on Existing Benchmarks. We measure the impact of WAREX across three popular benchmarks: WebArena, WebVoyager, and REAL. Our experiments show that introducing WAREX leads to significant drops in task success rates, highlighting the limited robustness of state-of-the-art agents.
Key facts. Cited by 14 papers in the map (data through 7 Oct 2026). Placed in Web, search, and research agents, one of 16 directions in LLM agents and tool use. Builds on 22 of its 36 references that are in the map. First posted on arXiv 28 Sep 2025.
Builds on
22 of 36 references.
Closest ancestors · 7
Same direction, newest first
- 2025REAL: Benchmarking Autonomous Agents on Deterministic Simulations of Real Websites15 Apr
- 2025AgentRewardBench: Evaluating Automatic Evaluations of Web Agent Trajectories11 Apr
- 2024The BrowserGym Ecosystem for Web Agent Research6 Dec
- 2024From Grounding to Planning: Benchmarking Bottlenecks in Web Agents3 Sep
- 2024WorkArena: How Capable Are Web Agents at Solving Common Knowledge Work Tasks?12 Mar
- 2024WebVoyager: Building an End-to-End Web Agent with Large Multimodal Models25 Jan
- 2023Mind2Web: Towards a Generalist Agent for the Web9 Jun
Other references · 15
- 2023Identifying the Risks of LM Agents with an LM-Emulated Sandboxcited by 514
- 2023Android in the Wild: A Large-Scale Dataset for Android Device Controlcited by 314
- 2023On Evaluating Adversarial Robustness of Large Vision-Language Modelscited by 281
- 2024R-Judge: Benchmarking Safety Risk Awareness for LLM Agentscited by 268
- 2023Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Modelscited by 260
- 2024Agent Q: Advanced Reasoning and Learning for Autonomous AI Agentscited by 201
- 2025Mobile-Agent-v3: Fundamental Agents for GUI Automationcited by 183
- 2024WebLINX: Real-World Website Navigation with Multi-Turn Dialoguecited by 177
- 2023Image Hijacks: Adversarial Images can Control Generative Models at Runtimecited by 165
- 2024OmniACT: A Dataset and Benchmark for Enabling Multimodal Generalist Autonomous Agents for Desktop and Webcited by 156
- 2024ST-WebAgentBench: A Benchmark for Evaluating Safety and Trustworthiness in Web Agentscited by 126
- 2025SafeArena: Evaluating the Safety of Autonomous Web Agentscited by 97
Built on by
Citing papers per year: 2026: 14.
14 papers.
Sort:
By area:
- 2026Agentic World Modeling: Foundations, Capabilities, Laws, and Beyondcited by 10
- 2026Are Online Skill and Memory Modules Always Worth Their Tokens? A Budget-Constrained Study of Web Agentscited by 6
- 2026Model or Harness? An Interaction-Centric Taxonomy for Localizing Agent Failurescited by 6
- 2026ClawTrap: A MITM-Based Red-Teaming Framework for Real-World OpenClaw Security Evaluationcited by 3
- 2026Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environmentscited by 2
- 2026StressWeb: A Diagnostic Benchmark for Web Agent Robustness under Realistic Interaction Variabilitycited by 1
- 2026Agent Meltdowns: The Road to Hell Is Paved with Helpful Agentscited by 1
- 2026Toward User-Conditioned Evaluation of Personal LLM Agents under Temporal Interventionscited by 1
- 2026Cost-Utility Alignment in LLM Agent Trajectories:Profiling,Attribution,Diagnosis,Adaptation,and Evaluationcited by 1
- 2026Web Agents Should Use Typed Actions Instead of Click-Based Browsingcited by 0
- 2026Signal-Driven Observation for Long-Horizon Web Agentscited by 0
- 2026CAP: A Scalable Benchmark for Evaluating Cross-Site Browser Agents with Complex Actions and Perceptioncited by 0
- 2026Verify Claims, Not Scores: Evidence-Based Verification of Modular Agents1 Oct 2026
- 2026Where Does Exactly-Once Live? Model, Harness, and Tool-Contract Effects on Duplicate Side Effects in LLM Agents24 Sep 2026
- 2026Cost-Utility Alignment in LLM Agent Trajectories:Profiling,Attribution,Diagnosis,Adaptation,and Evaluation25 Aug 2026
- 2026CAP: A Scalable Benchmark for Evaluating Cross-Site Browser Agents with Complex Actions and Perception9 Aug 2026
- 2026Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments2 Aug 2026
- 2026Model or Harness? An Interaction-Centric Taxonomy for Localizing Agent Failures30 Jul 2026
- 2026Toward User-Conditioned Evaluation of Personal LLM Agents under Temporal Interventions20 Jul 2026
- 2026Are Online Skill and Memory Modules Always Worth Their Tokens? A Budget-Constrained Study of Web Agents12 Jun 2026
- 2026Signal-Driven Observation for Long-Horizon Web Agents4 Jun 2026
- 2026Agent Meltdowns: The Road to Hell Is Paved with Helpful Agents18 May 2026
- 2026Agentic World Modeling: Foundations, Capabilities, Laws, and Beyond24 Apr 2026
- 2026StressWeb: A Diagnostic Benchmark for Web Agent Robustness under Realistic Interaction Variability27 Mar 2026
- 2026Are Online Skill and Memory Modules Always Worth Their Tokens? A Budget-Constrained Study of Web Agentscited by 6
- 2026ClawTrap: A MITM-Based Red-Teaming Framework for Real-World OpenClaw Security Evaluationcited by 3
- 2026Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environmentscited by 2
- 2026StressWeb: A Diagnostic Benchmark for Web Agent Robustness under Realistic Interaction Variabilitycited by 1
- 2026Toward User-Conditioned Evaluation of Personal LLM Agents under Temporal Interventionscited by 1
- 2026Cost-Utility Alignment in LLM Agent Trajectories:Profiling,Attribution,Diagnosis,Adaptation,and Evaluationcited by 1
- 2026Web Agents Should Use Typed Actions Instead of Click-Based Browsingcited by 0
- 2026Signal-Driven Observation for Long-Horizon Web Agentscited by 0
- 2026CAP: A Scalable Benchmark for Evaluating Cross-Site Browser Agents with Complex Actions and Perceptioncited by 0
- 2026Where Does Exactly-Once Live? Model, Harness, and Tool-Contract Effects on Duplicate Side Effects in LLM Agentscited by 0
- 2026Where Does Exactly-Once Live? Model, Harness, and Tool-Contract Effects on Duplicate Side Effects in LLM Agents24 Sep 2026
- 2026Cost-Utility Alignment in LLM Agent Trajectories:Profiling,Attribution,Diagnosis,Adaptation,and Evaluation25 Aug 2026
- 2026CAP: A Scalable Benchmark for Evaluating Cross-Site Browser Agents with Complex Actions and Perception9 Aug 2026
- 2026Permission Denied: Policy-Graded Evaluation of Coding Agents in Hardened Environments2 Aug 2026
- 2026Toward User-Conditioned Evaluation of Personal LLM Agents under Temporal Interventions20 Jul 2026
- 2026Are Online Skill and Memory Modules Always Worth Their Tokens? A Budget-Constrained Study of Web Agents12 Jun 2026
- 2026Signal-Driven Observation for Long-Horizon Web Agents4 Jun 2026
- 2026StressWeb: A Diagnostic Benchmark for Web Agent Robustness under Realistic Interaction Variability27 Mar 2026
- 2026ClawTrap: A MITM-Based Red-Teaming Framework for Real-World OpenClaw Security Evaluation19 Mar 2026
- 2026Web Agents Should Use Typed Actions Instead of Click-Based Browsing19 Feb 2026
Similar, not cited
Close in wording, no citation either way
- 2024WebSuite: Systematically Evaluating Why Web Agents Fail
- 2025BrowserArena: Evaluating LLM Agents on Real-World Web Navigation Tasks
- 2026WebRetriever: A Large-Scale Comprehensive Benchmark for Efficient Web Agent Evaluation
- 2026WebSP-Eval: Evaluating Web Agents on Website Security and Privacy Tasks
- 2024WebCanvas: Benchmarking Web Agents in Online Environments
- 2025An Illusion of Progress? Assessing the Current State of Web Agents
- 2026Odysseys: Benchmarking Web Agents on Realistic Long Horizon Tasks
- 2026Benchmarking Web Agent Safety under E-commerce Deceptive Interfaces