The Defender's Window

Essay by OpenAI president Greg Brockman, published on his personal blog (dated Aug 16, 2026) and cross-posted at openai.com/index/the-defenders-window/; he promoted it on X on Aug 17 (see 2026-08-17-brockman-defenders-window-tweet). Written in the wake of the OpenAI–Hugging Face agent intrusion, it argues that AI models are increasingly able to automate parts of real cyberattacks, but the same capabilities let defenders find and fix weaknesses first. The "defender's window" is the period while frontier labs still gate the strongest cyber models, before equivalent open-weight models are widely available. It describes four OpenAI pillars (securing code with models, automating infrastructure defense, continuous AI vulnerability enumeration, foundational controls) and gives ten concrete steps for organizations, plus a pitch for the Trusted Access for Cyber program; Brockman notes GPT-5.6 Sol found and fixed 13 issues on his own site within an hour. It appeared a day before OpenAI's Aug 18 RL-training pause. Verified by fetching the blog page (title, date, author); press: cryptobriefing.com, startuphub.ai, ai-tldr.dev. Some outlets give the date as Aug 17.

"AI models developed around the world are increasingly able to automate parts of real-world cyberattacks."

"The defender's window is open now."