Open workbench
Menu

Daily results

How well does sis flag malware today, and how often does it leave clean files alone?

Every day we run sis on three sets of files and publish the results: a fresh batch of malware from our collection, a fixed set of generated test files and a fixed set of benign files.

Stable is the current public release. Pre-release is the next one, still being tested.

Stable results

Flagged

63.5%

106 of 167 labelled malware files from today's collection were flagged.

Left alone

94.9%

56 of 59 benign reference files were not flagged.

Couldn't fully read

1.8%

3 of 167 scanned files from today's collection were incomplete.

sis v0.6.7 (Stable), run of 14 Oct 2026.

Pre-release results

Flagged

72.0%

121 of 168 labelled malware files from today's collection were flagged.

Left alone

100.0%

60 of 60 benign reference files were not flagged.

Couldn't fully read

0.6%

1 of 168 scanned files from today's collection were incomplete.

sis v0.7.0-rc.2 (Pre-release), run of 14 Oct 2026.

Over time

Is sis getting better?

The lines show how often sis flagged each set of files, day by day. A dashed vertical line marks the first day a release ran.

Hover a chart, or focus it and use the arrow keys, to read a day. Choose a release to see its figures.

Labelled malware that sis flaggedShare of labelled malware files flagged each day, for sis Stable.
  • Daily malware collection
  • Fixed reference set
0.0%25.0%50.0%75.0%100.0%9 Oct11 Oct13 Oct14 Octv0.6.763.5%77.5%

14 Oct 2026, sis v0.6.7. Daily malware collection: 63.5%. Fixed reference set: 77.5%.

Show these values as a table
Labelled malware that sis flagged
Datesis releaseDaily malware collectionFixed reference set
9 Oct 2026v0.6.768.9%82.5%
10 Oct 2026v0.6.767.0%79.5%
11 Oct 2026v0.6.771.1%84.6%
12 Oct 2026v0.6.768.9%80.0%
13 Oct 2026v0.6.775.9%71.8%
14 Oct 2026v0.6.763.5%77.5%
Benign files that sis wrongly flaggedShare of labelled benign reference files flagged each day, for sis Stable.
0.0%2.0%4.0%6.0%9 Oct11 Oct13 Oct14 Octv0.6.75.1%

14 Oct 2026, sis v0.6.7. Benign files wrongly flagged: 5.1%.

Show these values as a table
Benign files that sis wrongly flagged
Datesis releaseBenign files wrongly flagged
9 Oct 2026v0.6.71.7%
10 Oct 2026v0.6.73.4%
11 Oct 2026v0.6.71.7%
12 Oct 2026v0.6.71.7%
13 Oct 2026v0.6.70.0%
14 Oct 2026v0.6.75.1%
Release

sis v0.6.7

6 daily runs, 9 Oct to 14 Oct 2026.

Share of filesLatest runLowest dayHighest day
Malware flagged, daily collection63.5%63.5%75.9%
Malware flagged, fixed reference set77.5%71.8%84.6%
Benign files wrongly flagged5.1%0.0%5.1%

What our collection saw

How the collection is changing

Our collection comes from one public malware feed and reflects what that feed accepted in each period. It is a sample of that feed, so a change here may come from how files were collected.

We make no claim about what attackers are doing or about the wider threat landscape.

Each time the sis version for this section changes, we scan the whole collection again with the new version and start a new series. Series are drawn on their own and never joined, because two sis versions can read the same file differently. Dates are when we collected the files. This section uses sis Stable only.

Weeks start on Monday. Months start on the first day of the month.

Releases side by side

Stable and Pre-release on the same files

Both releases ran on the same files today, so the figures compare directly.

Stable sis v0.6.7

Malware flagged, daily collection
63.5%106 of 167 labelled malware files
Malware flagged, fixed reference set
77.5%31 of 40 labelled malware files
Benign files left alone
94.9%56 of 59 benign files
Couldn't fully read, daily collection
1.8%3 of 167 scanned files

Pre-release sis v0.7.0-rc.2

Malware flagged, daily collection
72.0%121 of 168 labelled malware files
Malware flagged, fixed reference set
82.5%33 of 40 labelled malware files
Benign files left alone
100.0%60 of 60 benign files
Couldn't fully read, daily collection
0.6%1 of 168 scanned files

Reading guide

How to read this

Flagged
sis rated the file Suspicious or Malicious. Anomalous is not flagged. A flag is a rating, not proof that a file is malware.
Labelled malware
A public source labelled the file as malware. Labels come from that source and can be wrong, so a verdict from sis is not ground truth either.
Left alone
The share of benign reference files that sis did not flag. The rest are false positives.
Couldn't fully read
sis could not read the whole file, for example because it was damaged or took too long. We count these on their own and do not treat them as clean.
The daily collection
A fresh batch of malware that changes every day. A day-to-day move can come from the files as much as from sis.
The fixed reference sets
The same files every day. When these results change, the cause is the sis release, not the files.
Denominators
Each percentage names the files it counts. "Not measurable" means the set had no files to count, so there is no rate.
Stable and Pre-release
Stable is the release you can install today. Pre-release is the next release, tested before it ships.

Limits

What we don't publish

  • No malware samples.
  • No file hashes.
  • No filenames or URLs taken from samples.
  • No results for single files.

Hashes and names let anyone find and fetch a specific file, which would turn a measurement page into a download index. Results for single files would show exactly where sis misses. Aggregate figures give the picture without either.

This page is automatic. The reviewed analysis is in our monthly reports.

Read the monthly reports Get sis

This page is generated automatically each day. It is not the reviewed monthly report. Last generated 14 Oct 2026.

Data version: fixture data.