THE CRUNCH
OpenAI has launched two security products under a new Daybreak brand: Daybreak Red Team, an AI-driven penetration testing tool, and Daybreak Defense Factory, which automates finding and fixing vulnerabilities. Both were announced at the company's Cyber at the Frontier event on 12 November and run on OpenAI's GPT-6 Cyber model.
Daybreak Red Team, available in early access, uses a fleet of AI agents to probe web applications for weaknesses, drawing on source code and app context to map attack paths. Nancy Wang, who leads cyber-applied AI at OpenAI, described it as penetration testing at the scale of automated continuous scanning. The tool can also validate reported flaws from code scanners, bug bounty programmes and disclosure reports, then test the patches for them.
Daybreak Defense Factory handles the defensive side: agents scan codebases for vulnerabilities and develop patches, delivering engineers a merge-ready pull request with the fix and a test showing it works. Engineers review and approve proposed patches before they go into production, and patches are not deployed automatically. Defense Factory can also ingest findings from other security products, with support for importing vulnerability data from Wiz, Snyk and Endor Labs.
OpenAI says Red Team's agents operate in isolated environments, with Guardian review enforcing testing boundaries and controlling which applications and endpoints they can access. Defense Factory is offered through a preview plugin in ChatGPT for workspaces with Daybreak access.
At the same event, OpenAI President Greg Brockman argued that companies will now be secure only to the extent of the frontier model they use to defend themselves, while conceding that security fundamentals remain important. Separately, a coalition of nonprofits filed a lawsuit in San Francisco Superior Court seeking to stop OpenAI, Anthropic, Google, Meta and SpaceX's AI businesses from developing systems more capable than their most advanced existing models, citing incidents including OpenAI agents accessing Hugging Face and an Australian government portal containing Medicare statistics.