OpenAI introduces GPT-6 Cyber, a security-research model limited to approved Daybreak Red customers
OpenAI announced GPT-6 Cyber on November 5, 2026, a model for finding and validating exploitable vulnerabilities, initially available through the API and Codex to a select group of approved Daybreak Red customers.
What happened
- OpenAI reports GPT-6 Cyber scores 48.5% on ExploitGym, up from 32.1% for GPT-5.6 Cyber, and 40.3% recall on a new offensive web penetration-testing evaluation versus 32.0% for GPT-6 Astra (OpenAI's own benchmarks).
- OpenAI says its researchers used the model to develop 948 privilege escalation exploits in Linux and identify 81 previously unknown high-severity vulnerabilities in Firefox, and that Mozilla has released fixes for many.
- In an alignment test OpenAI reports the model avoided exploiting out-of-scope services in 99.93% of tests without its deployment prompt and 100% with it.
- OpenAI classifies the model as Critical in cybersecurity under its Preparedness Framework, up from High for GPT-5.6 Cyber.
- Access starts with approved Daybreak Red customers and is to expand progressively; GPT-5.6 Cyber opens to all Daybreak Red customers, and Daybreak Blue alpha access for GPT-6 Astra expands.
Why it matters: Security teams and open-source maintainers should expect stronger AI-assisted vulnerability hunting, but access is gated to vetted defenders. The headline numbers are OpenAI's own evaluations.
Sources
- OpenAI: Introducing GPT-6 Cyber openai.com
Checked November 6, 2026 against the sources above. Claims about performance or benchmarks are the company's own unless stated otherwise.