14 Sources
[1]
OpenAI just released its answer to Claude Mythos
OpenAI is launching Daybreak, an AI initiative focused on detecting and patching vulnerabilities before attackers find them. Daybreak uses the Codex Security AI agent that launched in March to create a threat model based on an organization's code and focus on possible attack paths, validate likely vulnerabilities, and then automate the detection of the higher risk ones. Its launch comes just over a month after rival Anthropic announced Claude Mythos, a security-focused AI model it claimed was too dangerous to publicly release and only shared privately as a part of its own initiative, dubbed Project Glasswing. Still, that didn't stop at least a few unauthorized parties from getting access. However, OpenAI has so far lacked a similar security product. Like Glasswing, Daybreak isn't built on just one AI model -- OpenAI says "Daybreak brings together the most capable OpenAI models, Codex, and our security partners." Daybreak also involves specialized cyber models, including GPT-5.5 with Trusted Access for Cyber and GPT-5.5-Cyber, which began rolling out last week. OpenAI also says it's working with its "industry and government partners" while it prepares to "deploy increasingly more cyber-capable models."
[2]
OpenAI Launches Daybreak for AI-Powered Vulnerability Detection and Patch Validation
OpenAI has launched Daybreak, a new cybersecurity initiative that brings together frontier artificial intelligence (AI) model capabilities and Codex Security to help organizations identify and patch vulnerabilities before attackers find a way in using the same issues. "Daybreak combines the intelligence of OpenAI models, the extensibility of Codex as an agentic harness, and our partners across the security flywheel to help make the world safer for everyone," the AI upstart said. "Defenders can bring secure code review, threat modeling, patch validation, dependency risk analysis, detection, and remediation guidance into the everyday development loop so software becomes more resilient from the start." Like Anthropic's Mythos, the idea is to leverage AI to tilt the balance in favor of defenders and help detect and address security issues before they are found by bad actors. Access to the tooling remains tightly controlled for now, with OpenAI urging interested organizations to request for a vulnerability scan or contact its sales team. Daybreak leverages Codex Security to build an editable threat model for a given repository that focuses on realistic attack paths and high-impact code, identify and test vulnerabilities in an isolated environment, and propose fixes. The effort is built on the foundations of three models: GPT-5.5 (which has standard safeguards for general purpose use), GPT-5.5 with Trusted Access for Cyber (for verified defensive work in authorized environments), and GPT-5.5-Cyber (a permissive model for red teaming, penetration testing, and controlled validation). Several major companies like Akamai, Cisco, Cloudflare, CrowdStrike, Fortinet, Oracle, Palo Alto Networks, and Zscaler are already integrating these capabilities under the Trusted Access for Cyber initiative, OpenAI said, adding it's working with industry and government partners to deploy "more cyber-capable models" in the future. The rollout comes as AI tools have shortened the time it takes to discover latent security issues that may have otherwise escaped notice, turning what would once have taken a significant amount of time and effort into a much shorter period of work. As a result, the patching process can struggle to keep up even under ideal conditions. Earlier this March, HackerOne paused its bug bounty program citing a shift in balance between vulnerability discoveries and the ability for open-source maintainers to address them, attributing it to how AI-assisted research has led to an uptick in the volume of new flaws and the speed at which they are identified. This also has had the side effect of what's called triage fatigue, where project maintainers are required to sift through a flood of vulnerability reports, some of which could be plausible-sounding but entirely hallucinated by the AI models. As AI lowers the barrier to finding security flaws, companies like Anthropic, Google, and OpenAI have increasingly positioned AI security agents as a new operational layer to address the remediation bottleneck and safeguard digital infrastructure from potential exploitation. In a post published last week, security researcher Himanshu Anand said "the 90 day disclosure policy is dead," as large language models (LLMs) compress disclosure and exploit timelines to near-zero. "When 10 unrelated researchers find the same bug in six weeks, and AI can turn a patch diff into a working exploit in 30 minutes, what exactly is the 90-day window protecting? Nobody," Anand said.
[3]
Daybreak is OpenAI's response to Anthropic's Claude Mythos - Engadget
OpenAI has just launched Daybreak, a cybersecurity initiative that's clearly the company's competitor to Anthropic's Project Glasswing. If you'll recall, Glasswing uses Anthropic's unreleased AI model, Claude Mythos Preview, to provide its clients' cyber defense needs. It's been promising, so far: Mozilla revealed in April that Mythos helped it find and patch 271 vulnerabilities in the latest release of the Firefox browser. OpenAI says Daybreak uses its various AI models, including its specialized security agent Codex. In its announcement, the company explained that Daybreak is built around the premise that cyber defense should be built into software from the start and not just revolve around finding and fixing vulnerabilities. Daybreak aims to prioritize high-impact issues and reduce hours of analysis to minutes, to generate and test patches within repositories and to send back results with audit-ready evidence to the clients' systems. In OpenAI's example, it asked Codex Security to scan a codebase, validate the highest-risk findings and fix them. Daybreak will use GPT-5.5 for general purposes and GPT-5.5 with Trusted Access for Cyber for most defensive security workflows, including "secure code review, vulnerability triage, malware analysis, detection engineering and patch validation." It will also rely on GPT-5.5-Cyber for "preview access for specialized workflows, including authorized red teaming, penetration testing and controlled validation." OpenAI is already working with several partners under the initiative, including Cloudflare, Cisco, CloudStrike, Palo Alto Networks, Oracle and Akamai.
[4]
OpenAI launches Daybreak to take on Anthropic's Mythos in cyber defence
The new platform pairs GPT-5.5 variants with Codex Security and a roster of enterprise security partners, all aimed at defenders. OpenAI has unveiled Daybreak, a cybersecurity initiative aimed at finding software vulnerabilities, generating patches, and validating fixes inside enterprise codebases. The launch positions OpenAI directly against Anthropic's Mythos, which has spent the past few months dominating the conversation about AI-powered defence. Daybreak rests on three model variants, according to OpenAI. GPT-5.5 covers general-purpose use under standard safeguards. GPT-5.5 with Trusted Access for Cyber is reserved for verified defenders performing tasks such as secure code review, vulnerability triage, malware analysis, and patch validation. A third model, GPT-5.5-Cyber, is a more permissive variant for authorised red teaming, penetration testing, and controlled validation. The platform's working method begins with threat modelling against a given repository, then identifies and tests vulnerabilities in an isolated environment, and finally proposes and validates fixes. OpenAI says the goal is to compress security analysis that used to take hours into minutes, with audit-ready evidence handed back into enterprise systems. Launch partners include Akamai, Cisco, Cloudflare, CrowdStrike, Fortinet, Oracle, Palo Alto Networks, and Zscaler, all of whom are integrating Daybreak capabilities under OpenAI's Trusted Access for Cyber initiative. Access is being kept tightly controlled at launch; organisations are being asked to request scans or speak to OpenAI sales. The contrast with Anthropic's Mythos is becoming the defining shape of the AI cybersecurity race. Mythos has surfaced thousands of zero-day vulnerabilities across major operating systems and browsers, and Anthropic has kept it inside a controlled rollout to roughly a dozen partner organisations under a $100m defensive programme. Anthropic treats Mythos as a dual-use system whose offensive reasoning is powerful enough to require strict governance. OpenAI's pitch with Daybreak is narrower and more operational: a defender-first platform built on workflow integration rather than on standalone discovery power. The timing matters, as yesterday, Google's Threat Intelligence Group disclosed the first documented case of a criminal threat actor using an AI model to discover and weaponise a zero-day. The exploit, designed to bypass two-factor authentication on a widely used admin tool, was caught before it could be deployed. GTIG analyst John Hultquist called it "the tip of the iceberg." That backdrop sharpens the question Daybreak and Mythos are competing to answer: whether defenders can scale AI as quickly as attackers are starting to. Daybreak also gives OpenAI an enterprise security story it has lacked. Anthropic's lead in this segment has been measured in column inches and central-bank briefings as much as in product. OpenAI's response is to bring its enterprise relationships, its Codex code-execution tooling, and its full GPT-5.5 family to bear on a problem that, for most chief information security officers, still sits on the wrong side of the resourcing gap. Whether Daybreak narrows that gap, or simply shifts the spend from one model provider to another, will depend on how the partner integrations land in production. The first signal will be how many of the eight named launch partners have something to show by their next quarterly earnings.
[5]
'Daybreak': OpenAI's Answer to Anthropic's Project Glasswing Has Arrived
On Monday, OpenAI announced something called “Daybreak,†a project that CEO Sam Altman says is meant to “accelerate cyber defense and continuously secure software.“ The OpenAI blog post announcing Daybreak doesn’t mention the word “project†at all, perhaps to make readers slightly less apt to compare it to Anthropic’s Project Glasswing, but watch this: this sounds mighty similar to Anthropic’s Project Glasswing. Like Project Glasswing, it’s a program in which a frontier AI company seeks to partner with corporate and government entities to root out security vulnerabilities using OpenAI’s most advanced models in the hopes of “seeing risk earlier, acting sooner, and helping make software resilient by design.†Glasswing rolled out last month alongside Anthropic’s announcement of its Claude Mythos Preview model, famously the model so capableâ€"according to its creators at leastâ€"that it posed a danger to the world. As Anthropic’s system card for the model, explained: Claude Mythos Preview’s large increase in capabilities has led us to decide not to make it generally available. Instead, we are using it as part of a defensive cybersecurity program with a limited set of partners. In other words, because it's “the most cyber-capable model†Anthropic had ever built, it needs to be locked away for now, unless you're a VIP. Influential software developer Daniel Stenberg has called this an "amazingly successful marketing stunt for sure." Two days after that announcement, reports started materializing about a similar project at OpenAI. An anonymously sourced Axios story described it as “a product with advanced cybersecurity capabilities that it plans to release to a small set of partners.†The Daybreak announcement is much more public-facing than that, and comes across as significantly less ominous and secretive than Project Glasswing. The top of the page has two buttons: "Request a vulnerability scan" and "Contact sales.†When you click, “Request a vulnerability scan†you get a brief and unchallenging form: Altman said in his X post that OpenAI would "like to start working with as many companies as possible now," and in fairness, that's how the effort comes across. Compared to way Project Glasswing rolled out, with frightened governments scurrying around behind the scenes like agitated ants, it's refreshing. The announcement says Daybreak makes use of Codex Security, which was announced as a research preview back in March, to create a “threat model†of a given system that outlines its functions, who is trusted by the system, and what the vulnerabilities therefore are. With that as its context, it then digs into your actual codebase for the real world exploits.
[6]
OpenAI's New Daybreak Platform Uses GPT-5.5 to Find Software Vulnerabilities
OpenAI today launched Daybreak, an answer to Anthropic's Project Glasswing initiative and Mythos AI model. Like Glasswing, Daybreak is a cyber defense effort that will help tech companies find security vulnerabilities in their platforms. OpenAI says Daybreak is aimed at building cyber defense into software from the start. It builds on OpenAI's April launch of GPT-5.4-Cyber, which the company says has contributed to fixing more than 3,000 vulnerabilities. Daybreak combines the intelligence of OpenAI models, the extensibility of Codex as an agentic harness, and our partners across the security flywheel to help make the world safer for everyone. Defenders can bring secure code review, threat modeling, patch validation, dependency risk analysis, detection, and remediation guidance into the everyday development loop so software becomes more resilient from the start. OpenAI CEO Sam Altman said OpenAI would like to work with "as many companies as possible" to help them continuously secure their software against cyber threats. Several companies have already adopted Anthropic's competing Glasswing program, including Apple, Microsoft, Google, and Amazon. Daybreak uses Codex Security to build an editable threat model from a company's software repository, then it automates monitoring for higher-risk vulnerabilities. Issues that are found can be investigated in an isolated environment. Companies can request a Daybreak assessment from OpenAI, which includes a vulnerability scan. Pricing is not listed. There are three models available. GPT-5.5 has standard safeguards for general purpose use, while GPT-5.5 with Trusted Access for Cyber is meant for verified defensive work in authorized environments. GPT-5.5-Cyber is for specialized authorized workflows, and it features stronger verification and account-level controls. OpenAI is working with industry and government partners ahead of deploying more cyber-capable models in the future.
[7]
OpenAI reveals Daybreak, its attempt to topple Anthropic Mythos
OpenAI's new AI-powered cybersecurity solution will soon be let loose on the world * OpenAI has unveiled Daybreak, its latest security project * It seeks to rival Anthropic's Mythos in detecting and patching high-severity vulnerabilties * Daybreak will also help companies build software more securely from the start OpenAI has unveiled Daybreak, its answer to Anthropic's Mythos and Project Glasswing, sparking a potential cybersecurity arms race between the two companies. "Daybreak combines the intelligence of OpenAI models, the extensibility of Codex as an agentic harness, and our partners across the security flywheel to help make the world safer for everyone," the announcement said. The project looks to work with OpenAI's industry and government partners by securing software at the very beginning of the development process, creating a more robust base that, in time, will scale the effectiveness of cyber defense. Daybreak to build software securely from the start In the blog post, OpenAI sums up the project in a single sentence: "The goal is simple: accelerate cyber defenders and continuously secure software." Daybreak will allow organizations to apply OpenAI's Codex Security to their own repository using an 'agentic harness', where it will seek out, analyze, and patch attack paths and high-impact code. High-priority vulnerabilities can be analyzed and validated in a secure, isolated environment, "so teams can prioritize real, reproducible issues over noisy alerts." Codex Security will also allow teams to automate detection and response, increasing efficiency and securing critical vulnerabilities faster. Daybreak therefore seeks to delegate the rote work of identifying and analyzing to AI, and to return the evidence-backed results of vulnerabilities to human teams. Where Daybreak differs in its approach compared to Mythos is in building software securely from the start and constantly monitoring for vulnerabilities, compared to Mythos' focus of detecting and mitigating high-severity vulnerabilities at scale. Daybreak includes three models; GPT-5.5, as the default for general-purpose work; GPT-5.5 with Trusted Access for Cyber, to be used in defensive security workflows; and GPT-5.5-Cyber, for specialized workflows including red teaming and pen testing. Dane Knecht, CTO at Cloudflare, said, "We're excited about the potential of OpenAI's cyber capabilities to bring stronger reasoning and more agentic execution into security workflows. It's a big step forward for teams to be able to leverage frontier models not only to accelerate velocity, but also to improve their security posture." Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.
[8]
OpenAI's Daybreak uses AI smarts to find security flaws
OpenAI has launched Daybreak, a cyber defense suite of tools that uses the intelligence of the company's LLMs to find and remedy software vulnerabilities. The company hasn't freely released the tools to everyone; instead, it'll be "working with (...) industry and government partners" as it prepares to deploy "increasingly more cyber-capable models" in the future. Mashable 101 Fan Fave: Vote for your favorite creator today. According to OpenAI, Daybreak combines the intelligence of OpenAI models (in particular, the new GPT-5.5) with the extensibility of Codex (OpenAI's coding tool). Partners can use Daybreak for "secure code review, threat modeling, patch validation, dependency risk analysis, detection, and remediation guidance." Three models are offered at this time. The default GPT-5.5 model can be used for general purpose work. GPT-5.5 with Trusted Access For Cyber is for "most defensive security workflows," which includes secure code review, malware analysis, and patch validation. Finally, GPT-5.5-Cyber can be used for authorized red teaming, penetration testing, and controlled validation. If this sounds familiar, you're thinking of Anthropic's Project Glasswing initiative and Mythos, an AI that's so good at finding software vulnerabilities that Anthropic has only given access to selected partners. OpenAI did not publicly disclose pricing for Daybreak; those interested can contact the company's sales team for a quote. Several companies are listed as partners, including Cloudflare, Cisco, Oracle, and Akamai.
[9]
OpenAI Launches Daybreak as AI Firms Expand Into Cybersecurity - Decrypt
The announcement comes as Google, Anthropic, and other AI companies expand into cybersecurity tools and services. OpenAI on Monday launched Daybreak, a cybersecurity initiative aimed at helping developers and security teams identify vulnerabilities, validate fixes, and secure software faster using artificial intelligence. The announcement underscores a broadening shift as AI companies are increasingly pushing into cybersecurity as advanced models improve at analyzing code, finding software weaknesses, and automating technical tasks. In a post on X, OpenAI CEO Sam Altman called Daybreak an "effort to accelerate cyber defense and continuously secure software." "AI is already good and about to get super good at cybersecurity; we'd like to start working with as many companies as possible now to help them continuously secure themselves," Altman wrote. According to OpenAI, Daybreak combines the company's AI models with Codex, its coding-focused agentic system, to help security teams review code, analyze dependencies, model threats, validate patches, and investigate unfamiliar systems. The company said the goal is to reduce the time between identifying a vulnerability and fixing it. OpenAI did not immediately respond to a request for comment by Decrypt. Daybreak comes as cybersecurity researchers and industry experts warn about the threat of AI-powered cyberattacks after the launch of Claude Mythos last month. Using Mythos, Firefox browser developer Mozilla said it was able to find 271 unknown vulnerabilities in the browser. "AI can now help defenders reason across codebases, identify subtle vulnerabilities, validate fixes, analyze unfamiliar systems, and move from discovery to remediation faster," OpenAI said in a statement. "Because those same capabilities can be misused, Daybreak pairs expanded defensive capability with trust, verification, proportional safeguards, and accountability." The announcement also comes as major AI companies increasingly market their models for cybersecurity and software engineering tasks. OpenAI rival Anthropic has also increasingly marketed its Claude models for coding and security-related tasks as competition intensifies among AI companies seeking enterprise customers. While experts remain divided over the extent of the threat AI poses, researchers and government agencies have warned that advanced AI models could accelerate cyberattacks by helping hackers automate vulnerability research, malware development, and exploit creation. At the same time, Google researchers recently said large language models are becoming better at identifying and exploiting software weaknesses that traditional security scanners often miss. OpenAI said it plans to work with government and industry partners before deploying more cyber-capable AI models, as regulators and national security officials attempt to scrutinize advanced AI models before they launch to the public. "Daybreak is the first glimpse of sunlight in the morning," OpenAI wrote. "For cyber defense, it means seeing risk earlier, acting sooner, and helping make software resilient by design."
[10]
OpenAI launching security AI initiative to compete with Claude Mythos
The system will focus on detecting and patching vulnerabilities before attackers can find and exploit them. OpenAI is set to launch Daybreak, an AI initiative designed to identify and patch software vulnerabilities, before attackers have the opportunity to exploit them. Using the Codex Security AI agent that first launched in March, Daybreak creates a threat model developed using an organisation's code and concentrates on potential attack paths and vulnerabilities. Over the course of the coming weeks OpenAI intends to work with industry and government partners as the company prepares to deploy increasingly more cyber-capable models as part of the approach to iterative deployment. In a statement, OpenAI noted, "It starts from the premise that the next era of cyber defense should be built into software from the beginning by not only finding and patching vulnerabilities, but being resilient to them by design." Commenting on social media platform X, Sam Altman said, "OpenAI is launching Daybreak, our effort to accelerate cyber defense and continuously secure software. AI is already good and about to get super good at cybersecurity; we'd like to start working with as many companies as possible now to help them continuously secure themselves." The news regarding the launch of Daybreak comes weeks after AI-rival Anthropic announced Claude Mythos, an advanced large language model, designed for coding and reasoning. Concerns have been raised that Claude Mythos poses a significant cybersecurity risk and so far has not been publicly released. Currently it is only being shared privately, with large-scale organisations such as Amazon Web Services, Apple, Microsoft, Google, NVIDIA and Cisco, among others. All as part of Project Glasswing. In April, a private Discord group reportedly gained access to Mythos, leading to additional concerns that Anthropic may struggle to control access to the model. A source told Bloomberg that users gained access to Mythos on the same day Anthropic announced its limited launch, however, not for malicious purposes. Don't miss out on the knowledge you need to succeed. Sign up for the Daily Brief, Silicon Republic's digest of need-to-know sci-tech news.
[11]
OpenAI launches Daybreak to rival Anthropic in AI cybersecurity race
OpenAI has launched Daybreak, a cybersecurity initiative aimed at competing with Anthropic's Project Glasswing. Project Glasswing utilizes Anthropic's unreleased AI model, Claude Mythos Preview, which helped Mozilla find and patch 271 vulnerabilities in Firefox, according to a report from April. Daybreak employs various AI models from OpenAI, including the Codex security agent. The initiative is premised on integrating cyber defense into software development from the outset, rather than focusing only on identifying and fixing vulnerabilities. OpenAI stated that Daybreak seeks to prioritize high-impact issues and reduce analysis time from hours to minutes. It will generate and test patches within repositories and furnish clients with audit-ready evidence. In a demonstration, OpenAI asked Codex Security to scan a codebase, validate high-risk findings, and implement fixes. The initiative will utilize GPT-5.5 for general purposes and GPT-5.5 with Trusted Access for Cyber for defensive security workflows. These workflows encompass secure code review, vulnerability triage, malware analysis, detection engineering, and patch validation. Additionally, GPT-5.5-Cyber will support specialized workflows, including authorized red teaming and penetration testing. OpenAI is collaborating with several partners for Daybreak, including Cloudflare, Cisco, CloudStrike, Palo Alto Networks, Oracle, and Akamai.
[12]
OpenAI Debuts Daybreak to Counter Anthropic's Mythos | PYMNTS.com
By completing this form, you agree to receive marketing communications from PYMNTS and to the sharing of your information with our sponsor, if applicable, in accordance with our Privacy Policy and Terms and Conditions. The company's Daybreak initiative, announced Monday (May 11), is designed to boost cyberdefenses and "continuously secure software," as CEO Sam Altman put it. "AI is already good and about to get super good at cybersecurity; we'd like to start working with as many companies as possible now to help them continuously secure themselves," Altman wrote on social media platform X. OpenAI says Daybreak merges its AI model with its coding-focused agentic system Codex to help shorten the time between spotting a vulnerability and remedying it. In announcing Daybreak, OpenAI notes that artificial intelligence (AI) can now help defenders "reason across codebases," uncover subtle vulnerabilities, analyze unfamiliar systems, and more quickly shift from discovery to remediation. "Because those same capabilities can be misused, Daybreak pairs expanded defensive capability with trust, verification, proportional safeguards, and accountability," the startup added. The debut of Daybreak is happening as the cybersecurity industry is warning of possible AI-driven attacks following OpenAI rival Anthropic's launch of its Claude model. For example, Google cybersecurity researchers issued a report Monday saying they had identified and may have halted the use of the first zero-day exploit developed with AI. However, a spokesperson for Google later told Bloomberg News that the attackers had not used Mythos. And the International Monetary Fund (IMF) last week called for the creation of new resilience standards to counter the possibility of AI-driven cyberattacks. In other OpenAI news, the startup on Monday launched a company aimed to help organizations build and deploy AI systems. The OpenAI Deployment Company is a collaboration between OpenAI and 19 global investment firms, consultancies and system integrators, and is majority-owned and controlled by OpenAI, the company said in a news release. "AI is becoming capable of doing increasingly meaningful work inside organizations," OpenAI Chief Revenue Officer Denise Dresser said in the release. "The challenge now is helping companies integrate these systems into the infrastructure and workflows that power their businesses. DeployCo is designed to help organizations bridge that gap and turn AI capability into real operational impact." In an interview with CNBC later in the day, Dresser added that deploying AI can be a difficult road for enterprises. While these businesses are adopting the newest models, their CEOs say they struggle to keep up with what Dresser called the "compounded innovation."
[13]
OpenAI unveils Daybreak AI platform for cyber defenders
OpenAI has introduced Daybreak, a new "frontier AI for cyber defenders" initiative focused on helping organizations build safer software that is resilient by design. The company describes Daybreak as its vision for changing how software is built and defended by integrating cyber defense directly into the software development lifecycle. OpenAI says Daybreak represents "the first glimpse of sunlight in the morning." For cyber defense, the initiative is designed around seeing risks earlier, acting sooner, and helping make software resilient from the start. According to the company, the next era of cyber defense should move beyond simply finding and patching vulnerabilities. Instead, software systems should be designed to remain resilient even when vulnerabilities exist. OpenAI says AI can help defenders reason across large codebases, identify subtle vulnerabilities, validate fixes, analyze unfamiliar systems, and move from discovery to remediation faster. The company also says these capabilities are paired with trust, verification, proportional safeguards, and accountability to reduce misuse risks. The stated goal of Daybreak is to "accelerate cyber defenders and continuously secure software." Daybreak combines OpenAI models, the extensibility of Codex as an agentic harness, and partners across what the company calls its "security flywheel" to support AI-powered cyber defense workflows. Key capabilities include: OpenAI says these capabilities can be integrated into everyday development environments so software becomes more resilient from the beginning of the development cycle. The company outlined several ways organizations can deploy AI in cyber defense workflows: OpenAI also confirmed that it is working with government and industry partners ahead of deploying increasingly cyber-capable AI models through its iterative deployment approach in the coming weeks. OpenAI introduced multiple access levels for organizations depending on security workflow requirements. OpenAI says organizations can contact the company to determine the most suitable access model for their security workflows. OpenAI is currently allowing organizations to request vulnerability scans and Daybreak assessments to identify, validate, and remediate security issues across applications and codebases. The company says organizations can start with a Daybreak assessment to see how AI can help prioritize risk, remediate issues faster, and strengthen software defenses. Businesses interested in the program are required to submit company details, organization size, contact information, work email addresses, and phone numbers through OpenAI's request form.
[14]
OpenAI brings Daybreak to rival Claude Mythos: Here is what it can do
OpenAI describes Daybreak as its vision to change the way software is built and defended. Anthropic recently introduced Claude Mythos, a powerful AI system focused on cybersecurity. The company claimed that the model is capable of identifying security flaws across software systems at a scale that goes beyond what human experts can typically achieve. However, Anthropic also said that Mythos would not be made available to the general public because of the risks linked to its advanced cyber capabilities. Now, OpenAI has entered the same space with the announcement of Daybreak. Powered by GPT-5.5, Daybreak is designed to help developers and cybersecurity teams detect and fix vulnerabilities faster. OpenAI describes Daybreak as its vision to change the way software is built and defended. The company wants software to be developed with stronger security from the beginning instead of fixing vulnerabilities only after cyberattacks happen. Daybreak combines GPT-5.5 models with Codex, OpenAI's coding-focused agentic system. Together, they can assist with secure code reviews, threat modeling, patch validation, malware analysis, dependency risk analysis, and remediation guidance. Also red: Singer Dua Lipa sues Samsung for USD 15 mn over alleged use of her image: Here is what happened One major feature of Daybreak is its ability to generate and test patches directly inside repositories. OpenAI says the system works with monitored and controlled access while also creating audit-ready reports to track and verify remediation. Also read: OpenAI launches 3 advanced realtime voice AI models: Here is what they can do OpenAI is providing three different levels of access to Daybreak. Daybreak will use GPT-5.5 for general purposes and GPT-5.5 with Trusted Access for Cyber for 'most defensive security workflows, including secure code review, vulnerability triage, malware analysis, detection engineering, and patch validation.' The top-tier access is powered by GPT-5.5-Cyber and is designed for specialised and authorised tasks including penetration testing, red teaming and controlled validation workflows. Also read: Apple hit with Rs 28,340 crore lawsuit in UK over iCloud practices, here is why
Share
Copy Link
OpenAI unveiled Daybreak, a cybersecurity initiative that uses AI models including GPT-5.5 and Codex Security to find and patch software vulnerabilities. The launch positions OpenAI directly against Anthropic's Project Glasswing and Claude Mythos, as both AI giants race to tilt the balance in favor of defenders. Major partners including Cisco, Cloudflare, and CrowdStrike are already integrating the capabilities.
OpenAI has launched its OpenAI Daybreak cybersecurity initiative, an AI-powered defense system designed to detect and patch software vulnerabilities before malicious actors can exploit them. The platform leverages the Codex Security AI agent that debuted in March to create threat models based on an organization's code, focusing on realistic attack paths and high-impact vulnerabilities
1
. The timing is strategic: Daybreak arrives just over a month after Anthropic announced Claude Mythos, a security-focused model that the company claimed was too dangerous for public release and kept restricted under Project Glasswing1
.
Source: TechRadar
The announcement fills a notable gap in OpenAI's product lineup, providing the company with an enterprise security story it previously lacked. CEO Sam Altman stated the initiative aims to "accelerate cyber defense and continuously secure software," with OpenAI expressing interest in working with as many companies as possible
5
. Unlike Anthropic's more guarded approach, Daybreak presents itself as more accessible, featuring prominent "Request a vulnerability scan" and "Contact sales" buttons on its announcement page5
.Daybreak combines multiple OpenAI models with specialized security capabilities to compress hours of security analysis into minutes. The platform operates through a methodical workflow: it first builds an editable threat model for a given repository, identifies and tests vulnerabilities in isolated environments, and then proposes fixes with audit-ready evidence. This approach to proactively identifying and fixing cybersecurity vulnerabilities aims to integrate secure code review, patch validation, dependency risk analysis, and remediation guidance directly into everyday development loops
2
.
Source: FoneArena
The initiative relies on three distinct GPT-5.5 model variants, each tailored for specific security workflows. GPT-5.5 with standard safeguards handles general-purpose use, while GPT-5.5 with Trusted Access for Cyber serves verified defenders performing tasks like vulnerability triage, malware analysis, and detection engineering
3
. The third variant, GPT-5.5-Cyber, offers more permissive capabilities for authorized red-teaming, penetration testing, and controlled validation4
. Access remains tightly controlled, with organizations required to request scans or contact OpenAI's sales team2
.Major technology companies are already integrating Daybreak capabilities under the Trusted Access for Cyber initiative. The roster includes Akamai, Cisco, Cloudflare, CrowdStrike, Fortinet, Oracle, Palo Alto Networks, and Zscaler
2
. These partnerships position Daybreak as an operational platform focused on workflow integration rather than standalone discovery power, contrasting with Anthropic's approach4
.
Source: Gizmodo
The collaboration extends beyond private sector partners. OpenAI indicated it's working with industry and government partners to deploy increasingly cyber-capable models in the future
1
. Whether Daybreak narrows the resourcing gap that most chief information security officers face will depend on how partner integrations perform in production environments4
.Related Stories
The race between OpenAI and Anthropic intensifies against a backdrop of accelerating threats to digital infrastructure security. Google's Threat Intelligence Group recently disclosed the first documented case of a criminal threat actor using an AI model to discover and weaponize a zero-day exploit designed to bypass two-factor authentication
4
. GTIG analyst John Hultquist called it "the tip of the iceberg," underscoring the urgency of scaling AI defenses as quickly as attackers are adopting offensive AI capabilities4
.AI tools have fundamentally altered the vulnerability landscape by compressing discovery timelines. Security researcher Himanshu Anand declared that "the 90 day disclosure policy is dead," noting that when multiple unrelated researchers find the same bug within weeks and AI can turn a patch diff into a working exploit in 30 minutes, traditional disclosure windows no longer protect anyone
2
. This acceleration has created a remediation bottleneck, with companies like Anthropic, Google, and OpenAI positioning AI security agents as a new operational layer to address the gap2
.The speed at which AI assists vulnerability research has created unintended consequences. HackerOne paused its bug bounty program in March, citing a shift in balance between vulnerability discoveries and open-source maintainers' ability to address them
2
. This has led to triage fatigue, where project maintainers must sift through floods of vulnerability reports, some of which are plausible-sounding but entirely hallucinated by AI models2
. Daybreak's promise to prioritize high-impact issues and automate detection of higher-risk vulnerabilities directly addresses this challenge, though its effectiveness at scale remains to be demonstrated in real-world deployments.Summarized by
Navi
[1]
28 May 2026•Technology

22 Apr 2026•Technology

11 Dec 2025•Policy and Regulation

1
Business and Economy

2
Policy and Regulation

3
Technology
