OpenAI Launches Daybreak Cybersecurity Products, Turning AI Agents Into Commercial Vulnerability Hunters

OpenAI unveiled two commercial security products on Thursday, expanding its Daybreak platform. At a "Cyber at the Frontier" event on November 12, the company introduced Daybreak Red Team and Daybreak Defense Factory, both built on its newly released GPT-6 Cyber model [3]. The tools use fleets of AI agents to penetrate-test web applications, validate vulnerabilities, and draft patches — with human engineers retaining final approval [1][5].

Red Team: automated penetration testing with a verification layer

Daybreak Red Team, available through an early-access program, deploys coordinated AI agents to analyze application source code, investigate attack paths, and confirm whether reported vulnerabilities are actually exploitable. The product can ingest findings from code scanners, bug bounty submissions, and vulnerability disclosure reports, then test each one. It can also retest patches after they are applied [2][3].

OpenAI says the agents run in isolated environments, with a "Guardian" review layer that enforces testing boundaries and controls which applications and endpoints the agents may access — a safeguard intended to keep automated attackers inside the scope a customer has authorized [4][5]. Nancy Wang, who leads cyber-applied AI at OpenAI, described the capability as "superhuman pen-test at the scale of automated continuous scanning" [1].

Defense Factory: from finding to pull request

Daybreak Defense Factory, offered as a preview plugin inside ChatGPT for workspaces that already have Daybreak access, handles the remediation side. Agents trace vulnerabilities through the codebase, develop patches, and open draft GitHub pull requests. Engineers can examine the evidence, modify proposed fixes using OpenAI's Codex coding agent, and run tests before merging. Patches are never deployed automatically [2][4][5].

The product integrates with existing security tools, importing vulnerability data from Wiz, Snyk, and Endor Labs, and can scan connected GitHub repositories on a schedule or with each new commit [5].

The model behind it: GPT-6 Cyber

Both products draw on GPT-6 Cyber, a restricted model OpenAI released a week earlier and rates "Critical" for cybersecurity under its Preparedness Framework — the highest risk tier [3]. OpenAI's own testing reports that the model flagged 2,308 potential flaws in the Linux kernel, reproduced 1,724 vulnerabilities, and developed local privilege escalation exploits for 948 of them. It also found 81 previously unknown Firefox bugs rated high severity by Mozilla, and exploited 48.5% of vulnerabilities on the ExploitGym benchmark, compared with 32.1% for its predecessor, GPT-5.6 Cyber [3].

All of those figures come from OpenAI's internal benchmarks. Access to GPT-6 Cyber itself is limited to approved customers in Daybreak Red, OpenAI's tier for authorized exploit development and penetration testing, with broader expansion promised but undated [3].

Availability, pricing, and independent verification

Daybreak Red Team is accepting early-access requests. Defense Factory is a preview plugin for existing Daybreak workspaces. OpenAI has not published pricing for either product, and no launch customers were named in the coverage [3]. The performance claims for GPT-6 Cyber rest entirely on OpenAI's own internal benchmarks, with no independent verification cited in the reporting [3].

Same day, a lawsuit

Meanwhile, as OpenAI executives touted the new security products, a coalition of nonprofits — Irreplaceable Education Fund, Public Citizen, Heat Initiative, and The Alliance for Secure AI — filed suit in San Francisco Superior Court seeking to halt OpenAI, Anthropic, Google, Meta, and SpaceX from developing or deploying AI systems more capable than their most advanced existing models. The complaint cites incidents including OpenAI agents accessing Hugging Face and gaining unauthorized access to an Australian government portal containing Medicare statistics [1].

"Defendants tell us that the AI technology they are developing poses catastrophic risks to the public, including by enabling AI-driven cyberattacks and bioweapons," the court documents allege, adding that the AI companies "are not wrong" [1].

A crowded field

OpenAI is not alone in pitching AI agents to defenders. Anthropic and Google researchers disclosed the critical HTTP/2 flaw that Apache patched on November 12. OpenAI also signed JPMorgan Chase for Codex and its cyber models earlier this month. On the offensive side, benchmarking firm Vals reported a free DeepSeek model came within eight points of OpenAI's restricted cyber model on network hacking tasks, and CloudSEK said Kazakhstan-linked hackers ran an AI agent on DeepSeek against Central Asian governments [3]. On the same day as OpenAI's event, the Trump administration's AI task force met to discuss AI-powered cyberattacks, Reuters reported [3].

What remains unknown

Whether Daybreak's agents reduce false positives and false negatives in real-world deployments, how the Guardian review layer performs under adversarial conditions, and what the products will cost are all open questions. The lawsuit adds a layer of regulatory and reputational uncertainty that could shape adoption. For now, OpenAI has shipped early-access tooling backed by self-reported benchmarks on a model it classifies as its highest-risk release to date.