OpenAI is expanding its Daybreak program with two new access tiers and a specialized model called GPT-5.6-Cyber. The model is designed to help defenders spot vulnerabilities and build exploits before attackers can deploy AI-powered offensive tools at scale.

OpenAI says threat actors will increasingly use AI for cyberattacks, including fully autonomous ones. The window for defenders to prepare is getting smaller. Ironically, the best example for this came from OpenAI itself, when its own models accidentally hacked Hugging Face and other services after weeks of agentic scheming on internal message boards.

Daybreak is meant to give defenders a head start. The program now has two access tiers. Daybreak Blue gives users access to GPT-5.6 Sol with tailored safeguards for authorized defense work like vulnerability detection, malware analysis, and incident response. Daybreak Red targets security researchers doing vulnerability research, exploit validation, and penetration testing.

Getting into either tier requires identity verification, account security measures, monitoring, and legal declarations. Hardware security keys become mandatory for all Daybreak accounts on September 1, 2026. OpenAI also recommends running security workflows in isolated sandbox environments and using Auto-Review mode in Codex, which checks actions that need elevated privileges before they run.