CAIN OpenShell: figures & benchmarks
Evidence for CAIN OpenShell: 1. Evidence pack · 2. Answers to buyer questions · 3. Figures & benchmarks · 4. Selling tools · IHVRK kit · Learn it · why these pages exist
Every number on this page is read from the signed transcript inside the IHVRK kit; none is typed in by hand.
3/3
claims matched when recorded
2
attack cases refused or flagged as claimed
52 ms
median round trip (min 46, max 56), incl. network
| # | Kind | Claim | Recorded value | HTTP | ms |
|---|---|---|---|---|---|
| C01 | control | Open a work file in /tmp -> Inside the policy. | "ALLOW" | 200 | 46 |
| C02 | attack | Open /etc/shadow (system passwords) -> A protected system file. | "DENIED" | 200 | 52 |
| C03 | attack | Open /root/.ssh/id_rsa (a private key) -> Private keys are off limits. | "DENIED" | 200 | 56 |
Copy the table (paste into a spreadsheet)
id kind claim recorded_value expected http ms recorded_at C01 control Open a work file in /tmp -> Inside the policy. "ALLOW" ["ALLOW"] 200 46 2026-11-03T22:54:22+00:00 C02 attack Open /etc/shadow (system passwords) -> A protected system file. "DENIED" ["DENIED"] 200 52 2026-11-03T22:54:23+00:00 C03 attack Open /root/.ssh/id_rsa (a private key) -> Private keys are off limits. "DENIED" ["DENIED"] 200 56 2026-11-03T22:54:23+00:00
Download: figures.tsv · transcript.json (full answers) · whole kit
How to read these numbers
- Recorded 2026-11-03T22:54:24+00:00 against cainstudio.online from our build host; times include the internet round trip.
- They show these inputs, not every possible input. Known misses are on the limits page.
- This is not a load test, an SLA or a third-party benchmark. Re-run it yourself:
python3 verify.py --live.