OpenAI launches GPT-5.6-Cyber to help defenders find vulnerabilities before attackers do
OpenAI is expanding its Daybreak program with two new access tiers and a specialized model called GPT-5.6-Cyber. The model is designed to help defenders spot vulnerabilities and build exploits before attackers can deploy AI-powered offensive tools at scale.
OpenAI says threat actors will increasingly use AI for cyberattacks, including fully autonomous ones. The window for defenders to prepare is getting smaller. Ironically, the best example for this came from OpenAI itself, when its own models accidentally hacked Hugging Face and other services after weeks of agentic scheming on internal message boards. Daybreak is meant to give defenders a head start. The program now has two access tiers. Daybreak Blue gives users access to GPT-5.6 Sol with tailored safeguards for authorized defense work like vulnerability detection, malware analysis, and incident response. Daybreak Red targets security researchers doing vulnerability research, exploit validation, and penetration testing.Ad Getting into either tier requires identity verification, account security measures, monitoring, and legal declarations. Hardware security keys become mandatory for all Daybreak accounts on September 1, 2026. OpenAI also recommends running security workflows in isolated sandbox environments and using Auto-Review mode in Codex, which checks actions that need elevated privileges before they run.AdDEC_D_Incontent-1 GPT-5.6-Cyber answers 95 percent of sensitive security queries that other models block The new GPT-5.6-Cyber model is available through the Daybreak Red tier. It’s based on GPT-5.6 Sol and was specifically trained to perform better on tasks like finding zero-day vulnerabilities and building exploit chains. According to OpenAI, the model rarely refuses security-related queries that other models block by default. In an internal benchmark called “Advanced Cybersecurity Completion Rate,” GPT-5.6-Cyber answers 95 percent of queries covering scenarios like exploit chain development, authentication bypass, and privilege escalation. GPT-5.6 Sol with safety measures turned on hits just 1.5 percent. With Daybreak Blue, it reaches 2 percent. The previous model, GPT-5.5-Cyber, manages 57.3 percent.Ad In one specific test, the models had to develop a WebSocket authentication bypass for an internal admin panel. Only GPT-5.6-Cyber on Daybreak Red produced working exploit code.
