Recognises stored sensitive authentication data
A CVV, PIN block or full track column exists.
Can AI do this?
AI does this well Most of the tested AI models master this. 3 of 4 models in the current benchmark master it.
| Model | Tier | Probability of mastery | Status |
|---|---|---|---|
| gemini-4-argon | Flagship | 96% | Mastered |
| gemini-3.5-flash-lite | Low cost | 38% | Not shown |
| gpt-6-luna | Low cost | 94% | Mastered |
| claude-haiku-5-5 | Low cost | 96% | Mastered |
Mastered means a probability of at least 90% that the model has this knobit, estimated from its graded answers. “Not shown” means the answers do not settle it either way. How the models are tested.
What it looks like in practice
Expected result: The column to be removed, not classified
How it is assessed: Flags the deficient case and passes the acceptable one. Deficient: CO-004 card_auth_log.cvv2 Acceptable: Column removed; nothing to classify
Also known as: Sensitive authentication data stored
Related knobits
Builds on
All 16 knobits of Classify data.
Source: Review checklist 02-classification, row 5 (PCI 3.3.1)