OpenAI launches Daybreak cyber-defense initiative with GPT-5.5-Cyber and Codex Security
Confirmed
Status
- Claim
Confirmed
- Our reporting
- High confidence
- Importance
- 3 of 5
- Last verified
- 6 November 2026
Your AI and this story
- GPT-6 Astra12 days after its cutoff
- Claude Opus 5.5In its training data
- Gemini 4 Hydrogen42 days after its cutoff
- Grok 4.7In its training data
It is after the cutoff of GPT-6 Astra and Gemini 4 Hydrogen, and can be in the training data of Claude Opus 5.5 and Grok 4.7.
Key facts
- Unveiled May 12, 2026
- Models: GPT-5.5, GPT-5.5 with Trusted Access for Cyber (TAC), GPT-5.5-Cyber; plus Codex Security
- TAC program: hundreds of organizations and ‘thousands of individual defenders’ as of May 2026 (incl. Akamai, Cisco, Cloudflare, CrowdStrike, Palo Alto Networks, JPMorgan Chase, Goldman Sachs)
- June 22, 2026: Patch the Planet launched with Trail of Bits, in collaboration with HackerOne and CALIF, plus full GPT-5.5-Cyber release and a Daybreak Cyber Partner Program
- Initial Patch the Planet participants: cURL, NATS Server, pyca/cryptography, Sigstore, aiohttp, Go, freenginx, Python, python.org
- Sept 3, 2026: GPT-6 Astra released first to Daybreak customers
- Account security: TAC members using the most cyber-capable models had to turn on Advanced Account Security from June 1, 2026 (Yubico, May 14). From Sept 1, TAC accounts needed hardware passkeys (Forrester, Jul 31). New individual Daybreak users must enrol in AAS with a FIDO2 hardware security key. Existing individual users had until Oct 1, 2026 to comply or lose access. Hardware keys must be the only login method, and software or synced passkeys do not qualify (OpenAI help center via Yubico, Sept 29)
- Sophos joined the Daybreak Cyber Partner Program on June 22, 2026 (focus: MDR threat investigation, advisory assessments, exposure management). On Oct 9 OpenAI published a customer story, ‘Sophos cuts threat investigation time by 96% with OpenAI Daybreak’ (page blocked to our fetcher; headline figure only, baseline unverified)
Show 1 more
- Nov 4, 2026: Daybreak Red made available in AWS GovCloud (US-East); Nov 5: GPT-6 Cyber launched first to Daybreak Red customers (see OpenAI launches GPT-6 Cyber, a security model it says is stronger than GPT-6 Astra on cyber tasks and better aligned, first for Daybreak Red customers)
What happened
With frontier models rapidly accelerating vulnerability discovery, OpenAI created a structured program giving vetted defenders access to its most cyber-capable models and tooling, then shifted emphasis toward patching (not just finding) bugs in critical open-source software.
Why it matters
Establishes OpenAI’s “defenders first” release pattern for cyber-capable models, later used for GPT-6 Astra; it is also the civilian counterpart to the government-gated GPT-5.6 rollout.
Sources
13 sources from 9 sites. Numbers match the chips in the text.
13 sources: 6 primary, 7 press
Primary
- OpenAI extends cyber access to Ukraine for civilian defense (Sept 23, 2026)openai.com, official
- Daybreak: Tools for securing every organization in the world (OpenAI)openai.com, official
- Patch the Planet (OpenAI)openai.com, official
- OpenAI Help Center: Daybreak Trusted Access for Cyber overviewhelp.openai.com, docs
- OpenAI: Sophos cuts threat investigation time by 96% with OpenAI Daybreak (Oct 9)openai.com, official
- OpenAI: Daybreak Red is now available in AWS GovCloud (US-East)openai.com, official
Press
- The Hacker News: OpenAI launches Daybreakthehackernews.com, press
- SiliconANGLE: OpenAI expands Daybreak with Patch the Planet and full GPT-5.5-Cyber releasesiliconangle.com, press
- CNBC: OpenAI expands Daybreak cybersecurity initiative (Aug 10)cnbc.com, press
- BBC: OpenAI to give Ukraine its Daybreak cyber-defence system for freebbc.com, press
- Yubico: OpenAI Daybreak and the role of hardware security keys (Sept 29, 2026)yubico.com, press
- Forrester: OpenAI makes hardware passkeys mandatory for its highest-end cyber model (Jul 31, 2026)forrester.com, press
- Sophos joins the OpenAI Daybreak Cyber Partner Program (GlobeNewswire, June 22, 2026)globenewswire.com, press
Changes
- Daybreak Red in AWS GovCloud; GPT-6 Cyber link
- Added Sophos (partner since June 22; Oct 9 customer story, headline only)
- Added the hardware-security-key requirement for individual Daybreak/TAC users (Oct 1, 2026 deadline). The OpenAI help page returned 403, so its wording comes from Yubico’s quotes
- Added BBC link on the Ukraine donation
- Added the Sept 23, 2026 extension of Daybreak to the Government of Ukraine (with the Ministry of Digital Transformation; free access to defend civilian infrastructure; announced at UNGA by Sasha Baker and Consul General Dmytro Kushneruk).
- Filed
