What Is Benchmaxing? Why AI Labs Are Hiding Test Questions
Benchmaxing explained: why AI labs train toward public test questions, and why independent scorers are now hiding theirs to keep leaderboards honest.

What is benchmaxing?
Benchmaxing is the practice of training or tuning an AI model specifically to score well on known benchmark tests, rather than to be broadly capable. It happens because benchmark questions, or close variants of them, sometimes leak into a model’s training data, or because labs optimize their models against the exact skills a popular test measures. The result is a model that looks exceptional on a leaderboard but performs noticeably worse on new, unseen questions that measure the same skill.
TL;DR
- Benchmaxing describes models that are shaped around known test questions, producing leaderboard scores that overstate real-world ability.
- Independent evaluators are responding by switching to private, unpublished benchmark questions that labs cannot train against in advance.
- The Artificial Analysis Index is one of the most widely cited independent rankings, combining reasoning, coding, science, and math tests into a single comparable score.
- Frontier models currently cluster within a few points of each other at the top of that index, which means a small amount of benchmaxing can swing rankings significantly.
- Elon Musk has said Grok 5 could score “nearly perfect” on Humanity’s Last Exam, a benchmark designed to be extremely hard to saturate, which is exactly the kind of claim that invites scrutiny over whether a score reflects genuine capability or targeted optimization.
- Public-vs-private scoring gaps, like those seen around Grok’s benchmark results, are becoming a standard way to check whether a lab’s numbers hold up outside the test set it trained on.
- The shift toward private benchmarks is a direct response to labs racing for leaderboard position every few weeks, which raises the incentive to optimize for the test itself.

Why do AI labs want high benchmark scores so badly?
Benchmark scores are the easiest way for a lab to prove progress to investors, developers, and the public without opening up its model for a full independent audit. A single number like “59 on the Artificial Analysis Index” is simple to put in a press release and simple to compare against a competitor’s “46.” That simplicity is useful, but it’s also exactly what creates pressure to game the number.
The AI industry right now is moving fast enough that a lab can go from being considered behind to holding the top spot in a matter of weeks. Google’s Gemini line is the clearest recent example: one model scored 50 on the Artificial Analysis Index, and about a month later a follow-up model from the same company scored 59 and took the top ranking. When the gap between the best models from different labs is only a few points, there’s a strong incentive to find any edge, including training toward the specific style and content of the tests used to rank them.
How does benchmaxing actually happen?
There are a few ways it shows up in practice. Training data can accidentally or deliberately include benchmark questions or very similar ones, so the model has effectively seen the test before. Labs can also fine-tune models on the particular format and reasoning style a benchmark rewards, which boosts the score on that test without necessarily improving general capability. And because many popular benchmarks are public, their questions circulate online, get discussed in forums, and eventually end up in the kind of web-scraped data that trains new models.
None of this requires bad intent. A lab can genuinely believe it’s improving general reasoning while actually overfitting to a handful of well-known test formats. The problem is that once a benchmark is public for long enough, it stops being a clean measurement of ability and starts being something closer to a practice exam the model has already taken.
Why are evaluators switching to private test questions?
The fix that independent evaluators are leaning into is simple: stop publishing the questions. If a benchmark’s questions are never released, no lab can train on them, intentionally or otherwise. This is the direction groups like Artificial Analysis have moved in, keeping evaluation questions private so that a model’s score reflects performance on genuinely unseen material rather than recall of something close to the test it already saw.
This matters because the gap between a model’s public benchmark score and its performance on fresh, private questions is one of the most honest signals available about whether a lab has been benchmaxing. A model that drops several points when faced with new questions in the same category it supposedly mastered is a model whose original score was, at least partly, inflated by familiarity rather than ability.
What does the Grok case tell us about this problem?

Nothing gets lost.
Grok is a useful example of why this scrutiny exists, not because xAI is uniquely guilty of benchmaxing, but because Elon Musk has made such specific and aggressive benchmark predictions for Grok 5 that they invite exactly this kind of check. Musk has said he expects Grok 5 to be “nearly perfect” on Humanity’s Last Exam, a benchmark made up of extremely difficult, expert-written questions specifically designed to resist being saturated by any model. He’s also said Grok 4, which he called “primitive” by comparison, already scored around 52% on the text portion of that same test.
Meanwhile, on independent measures run by outside groups, Grok’s current models have trailed the leaders. Grok 4.7 scored 46 on a recent version of the Artificial Analysis Index, well behind the top models clustered in the low-to-mid 50s and high 50s. On Terminal-Bench, a test of AI agents doing real coding tasks on a computer, Grok 4.7 scored about 26% compared with roughly 60% for one of the current leading models. That’s a wide gap between where xAI’s public rhetoric points and where independent, unseen-task testing currently places the model.
That gap is exactly the kind of thing private benchmarks are built to catch. If a future Grok model posts a dramatically higher score on a public benchmark than it does on fresh private questions covering the same skill, that discrepancy becomes the evidence of benchmaxing, not the headline number itself.
Is a benchmark score still worth trusting?
A single benchmark score is worth less than it used to be, but a score from a benchmark with private, unpublished questions, verified by an independent third party rather than self-reported by the lab, is still a meaningful signal. The key things worth checking before trusting a number are who ran the test, whether the questions were public before the model was trained, and whether the result holds up across multiple different benchmarks rather than just one.
The Artificial Analysis Index is useful precisely because it combines several tests into one score, which makes it harder to game than any single benchmark on its own. A model can potentially overfit to one test, but overfitting to reasoning, coding, science, and math tests simultaneously, especially when some of those questions are kept private, is a much harder thing to fake.
The practical lesson for anyone building with AI is to treat leaderboard position as a starting point for investigation, not a final verdict. Check whether the benchmark used private or public questions, look for independent replications, and where possible, test the specific tasks you actually care about rather than trusting that a high score on Humanity’s Last Exam or the Artificial Analysis Index translates directly into real-world performance on your use case.
Frequently Asked Questions
What does benchmaxing mean in AI?
Benchmaxing means training or tuning a model to score well on specific benchmark tests, often because those tests’ questions have leaked into training data or because the model has been optimized for that test’s particular format, rather than for general capability.
Why did Artificial Analysis move to private benchmark questions?
Moving to private, unpublished questions prevents labs from training on the exact test material, whether deliberately or through data leakage, which makes the resulting scores a more honest measure of how a model performs on genuinely unseen tasks.
What is the Artificial Analysis Index?
It’s an independent ranking that combines results from multiple tests, covering reasoning, coding, science, and math, into a single score used to compare AI models from different labs on a common scale.

Did Grok’s benchmark scores drop between public and private tests?
Grok’s current public benchmark standing trails top models on independent tests like the Artificial Analysis Index and Terminal-Bench, even as Elon Musk has predicted near-perfect scores for the upcoming Grok 5 on tests like Humanity’s Last Exam, a gap that highlights exactly why public-versus-private comparisons matter.
How can developers tell if a benchmark score is trustworthy?
Check whether the test was run independently rather than self-reported, whether the questions were kept private before testing, and whether the model performs consistently well across several different benchmarks rather than excelling on just one.


