Cloudflare taps OpenAI’s cyber models to find and block code flaws
Cloudflare Inc. today opened early access to Vulnerability Discovery and Remediation, a service that uses OpenAI Group PBC’s cybersecurity models to find software flaws in customer applications and block attacks on them at the network edge.
The service runs inside Cloudflare Managed Defense, the company’s security operations center offering, and reaches OpenAI’s GPT-5.6-Cyber model through the Daybreak Defense Network. Cloudflare first takes a snapshot from its Web Assets inventory and web application firewall showing which routes are live and what security events they have thrown off.
A reconnaissance agent maps request paths to sections of the codebase, and hunter agents work from that map. Code running on Cloudflare Workers is pulled in through Workers Observability.
Every finding is validated before it gets a risk rating, which then moves up if production evidence shows heavy traffic or active probing against the affected route.
