OpenAI launches GPT-6 Cyber under Critical cybersecurity rating

OpenAI on Thursday, Nov. 5, introduced GPT-6 Cyber, a cybersecurity model trained to find and validate exploitable vulnerabilities while staying inside the scope researchers set.

The company said GPT-6 Cyber is initially available through its API and Codex to a select group of approved Daybreak Red customers, with access expanding to all Daybreak Red customers soon. Daybreak Red supports deeper exploit development and authorized security testing, OpenAI said. The Verge reported that OpenAI plans to expand GPT-6 Cyber to all Daybreak Red customers in the coming weeks.

On ExploitGym, which tests whether models can exploit a specified vulnerability, GPT-6 Cyber scored 48.5%, up from 32.1% for GPT-5.6 Cyber, OpenAI said. In a separate alignment evaluation, ExploitGym Honeypot, GPT-6 Cyber avoided exploiting out-of-scope services in 99.93% of tests without its deployment prompt, and 100% with the prompt, according to OpenAI.

OpenAI classified GPT-6 Cyber as Critical in cybersecurity under its Preparedness Framework, up from High for GPT-5.6 Cyber. The Verge said Critical means the model “can identify and develop functional zero-day exploits of all severity levels in many hardened real-world critical systems without human intervention.”

In research campaigns, OpenAI said its researchers used GPT-6 Cyber to identify 81 previously unknown high-severity vulnerabilities in Firefox, and that Mozilla has released fixes for many of them. On Linux, OpenAI said GPT-6 Cyber reproduced 1,724 vulnerabilities and developed working privilege-escalation exploits for 948 of them, more than five times the 166 exploited by GPT-5.6 Sol under the same research harness.

OpenAI said it paired the model with stronger safeguards to detect and disrupt misuse, including protections against high-risk assistance involving critical infrastructure such as power plants and water treatment facilities. It also introduced Daybreak Red for Critical Infrastructure for approved defenders.

Customers including Cisco, CrowdStrike and CodeRabbit are using the model for vulnerability research and code review, OpenAI said. CrowdStrike, which recently described an AI Kill Switch for cutting off rogue agents, said GPT-6 Cyber “builds and validates working exploits at scale, and stays in scope while it does it.”

AI Tech Daily previously covered a Fortune report that OpenAI was preparing GPT-6 Cyber; Thursday’s post is the model launch.

OpenAI launches GPT-6 Cyber under Critical cybersecurity rating

Sources