OpenAI expands Daybreak with Patch the Planet and full GPT-5.5-Cyber release
OpenAI Group PBC today expanded its Daybreak cybersecurity program with a new open-source patching initiative called Patch the Planet, an updated Codex Security plugin, a partner program and the full release of its most capable defensive model, GPT-5.5-Cyber.
The push marks a shift in how OpenAI talks about AI and security. The company says its models now find vulnerabilities faster than defenders can fix them, leaving security teams buried in reports. The new bottleneck, OpenAI says, is patching.
Patch the Planet is the centerpiece. Founded with security firm Trail of Bits Inc. and in collaboration with HackerOne Inc. and Calif, the initiative funds expert researchers and equips them with Codex Security and OpenAI’s models to work directly with the maintainers of widely used open-source projects. More than 30 projects have committed to taking part, with early participants including cURL, the Go project, Python, Sigstore and pyca/cryptography.
The pitch rests on how thinly stretched open source is. OpenAI cited research from the Linux Foundation and Harvard finding that 94% of the widely used projects studied had fewer than 10 developers responsible for more than 90% of the code added in a year. Throw more AI-generated bug reports at teams that small and the result is a bigger backlog, not better security. To avoid that, OpenAI said a human security engineer reviews every Patch the Planet finding before it reaches a maintainer.
