Cloudflare Deploys OpenAI's GPT-5.6-Cyber to Find and Block Code Flaws Before Exploitation

Cloudflare taps OpenAI's cyber models to find and block code flaws

Cloudflare taps OpenAI's cyber models to find and block code flaws Cloudflare Inc. today opened early access to Vulnerability Discovery and Remediation, a service that uses OpenAI Group PBC's cybersecurity models to find software flaws in customer applications and block attacks on them at the network edge. The service runs inside Cloudflare Managed Defense, the company's security operations center offering, and reaches OpenAI's GPT-5.6-Cyber model through the Daybreak Defense Network. Cloudflare first takes a snapshot from its Web Assets inventory and web application firewall showing which routes are live and what security events they have thrown off. A reconnaissance agent maps request paths to sections of the codebase, and hunter agents work from that map. Code running on Cloudflare Workers is pulled in through Workers Observability. Every finding is validated before it gets a risk rating, which then moves up if production evidence shows heavy traffic or active probing against the affected route. Two kinds of fix come out of the process. Custom firewall rules, scoped to the method, path and request details needed to reach the vulnerable code, can go up as a stopgap while developers work. The models also draft code patches for engineers to review. No rule and no patch takes effect without explicit human approval, and Cloudflare said the models cannot apply either one on their own. Prompts travel through Cloudflare AI Gateway to OpenAI servers, and no inference runs on Cloudflare's own edge. Redaction strips out context the model does not need. Every proposal must also pass checks written outside the model. A failed check stops the workflow before a customer sees anything. Nobody is short of vulnerabilities to fix. The National Vulnerability Database took in 60,475 of them by September, Cloudflare said. The total for all of 2025 was 48,185. Scanners will hand a team thousands of findings without showing which ones matter in production, and Cloudflare said that is the gap the service is meant to close. Cloudflare is leaving behind what co-founder and Chief Executive Matthew Prince called chasing patches "one vulnerability at a time." Teams fighting AI-driven attacks by hand are losing, in his view. A network that reads internet traffic in real time, paired with GPT-5.6-Cyber, lets defenders stop attacks before they land, he added. GPT-5.6-Cyber arrived in August, when OpenAI split Daybreak into two access tiers and put the model behind the higher one, Daybreak Red, for vulnerability research and exploit validation. The model completed 95% of advanced cybersecurity requests on OpenAI's own benchmark, against 1.5% for the general-purpose GPT-5.6 Sol. McCall McIntyre, head of global cyber partnerships at OpenAI, said the network is meant to give defenders the advantage of frontier AI "safely." Palo Alto Networks Inc. put the same models to work inside its Unit 42 consulting engagements last month. Notably, Proofpoint Inc. also announced today that Daybreak models now sit behind a SOC Analyst Agent for threat investigation. OpenAI used the same day to commit $1 billion to subsidized Daybreak access for water and electricity utilities, local government, community banks and nonprofits. Access is by invitation only. Cloudflare is holding the early phase to selected enterprise customers, and each engagement begins with one application the customer nominates. Pricing was not disclosed. Cloudflare gave no timeline for taking the service beyond early access.

Cloudflare launches AI-powered vulnerability detection service By Investing.com

SAN FRANCISCO - Cloudflare Inc. (NYSE:NET) announced today the launch of Vulnerability Discovery and Remediation, a service that uses OpenAI models to identify and address software vulnerabilities, according to a company press release. The service, available in early access through Cloudflare Managed Defense, combines code analysis and automated patch generation using OpenAI Daybreak models, including GPT-5.6 Cyber, with traffic and security data from Cloudflare's network. The system aims to identify vulnerabilities and block attacks before exploitation occurs. The National Vulnerability Database had logged 60,475 vulnerabilities by September 2026, exceeding the 48,185 total recorded across all of 2025, according to the press release. The service integrates AI code analysis across Cloudflare's platform, including Web Assets, WAF, and Workers Observability. Customers can correlate live Internet traffic with vulnerability scans, deploy custom WAF rules for attack vectors, and receive AI-generated code patches for developer review. All code fixes and edge rules require human approval before implementation. "We built Cloudflare's global network to analyze what's happening across the Internet in real time. Pair that with the power of OpenAI GPT-5.6 Cyber, and you're not just reacting to attacks anymore, you're stopping them before they land," said Matthew Prince, co-founder and CEO of Cloudflare. The service is part of the OpenAI Daybreak Defense Network partnership. "We are excited to team up with Cloudflare to put proactive, AI-driven security directly into the hands of enterprise defenders," said McCall McIntyre, Head of Global Cyber Partnerships at OpenAI. Vulnerability Discovery and Remediation is available by invitation for select Cloudflare Enterprise customers. This article was generated with the support of AI and reviewed by an editor. For more information see our T&C.