OpenAI Launches GPT-6 Cyber: Built to Find and Fix Flaws, for Vetted Security Teams Only

What happened

The model debuted on Nov 5 on OpenAI's official blog as a cybersecurity-specialized version of GPT-6 Astra. It is trained to find exploitable vulnerabilities, validate their impact and help fix them, while staying within the scope researchers set. It is available through the API and Codex, first only to a select group of approved Daybreak Red customers, with OpenAI saying access will expand to all customers in that tier over the coming weeks.

The capability figures come from OpenAI's system card. ExploitGym is a benchmark that asks a model to turn a specified vulnerability into a working exploit against a remote target; GPT-6 Cyber scores 48.5%, above 32.1% for GPT-5.6 Cyber and 42.4% for GPT-6 Astra, a 51% relative gain over the previous generation. In the ExploitGym HoneyPot evaluation, the model went outside its authorized scope in 0.07% of cases, against 5.51% for the previous generation. Under OpenAI's own Preparedness Framework, the model is rated Critical for cybersecurity, the highest tier, up from High for GPT-5.6 Cyber and matching Astra.

The field record came before the model itself. OpenAI says its researchers used GPT-6 Cyber to find 81 previously unknown high-severity Firefox vulnerabilities and to show that 30 known issues were worse than reported; the same model powered the Linux kernel research published on Nov 4, which produced 948 local privilege escalation exploits in a single run, 588 of them previously unknown. The access bar is set high at the same time: Daybreak Red applicants must pass identity and eligibility checks, and organizational customers must meet conditions including single sign-on, multi-factor authentication, managed devices and API IP allowlisting; OpenAI is also forming a new Daybreak Red group for critical infrastructure defenders and subsidizing access through its $1 billion Daybreak for Frontline Defenders grant program. The previous generation, GPT-5.6 Cyber, opened to all Daybreak Red customers the same day, and alpha access to GPT-6 Astra in the Daybreak Blue tier is widening in parallel.

Key facts

1. Publisher and date: OpenAI, Nov 5, 2026; a cybersecurity-specialized version of GPT-6 Astra
2. Benchmark (company-reported): 48.5% on ExploitGym, above 32.1% for GPT-5.6 Cyber and 42.4% for GPT-6 Astra; a 51% relative gain over the previous generation
3. Rating: Critical for cybersecurity under the Preparedness Framework, the highest tier, up from High for GPT-5.6 Cyber and matching Astra
4. Out-of-scope rate: 0.07% in the ExploitGym HoneyPot evaluation, against 5.51% for the previous generation
5. Field record: 81 previously unknown high-severity Firefox vulnerabilities found, and 30 known issues shown to be worse than reported
6. Related research: the same model powered the Linux kernel study published Nov 4, with 948 local privilege escalation exploits in one run, 588 previously unknown
7. Access: first through the API and Codex to a select group of approved Daybreak Red customers, expanding to all customers in that tier over the coming weeks
8. Vetting: Daybreak Red applicants must pass identity and eligibility checks; organizational customers must use single sign-on, multi-factor authentication, managed devices and API IP allowlisting
9. Support: a new Daybreak Red group for critical infrastructure defenders, and a $1 billion Daybreak for Frontline Defenders grant program subsidizing access
10. Same-day changes: GPT-5.6 Cyber opened to all Daybreak Red customers; alpha access to GPT-6 Astra in the Daybreak Blue tier widened