OpenAI has launched two security products under its Daybreak brand. The first, Daybreak Red Team, is available in Early Access and uses AI agents to automatically probe web applications for vulnerabilities. These agents analyse source code and app context to map out attack paths. The tool also verifies reported security flaws from bug bounty programs or code scanners and tests patches. Nancy Wang, head of Cyber-Applied AI, said the tool is designed to deliver penetration testing at the speed of automated continuous scanning while matching the depth of human testers.
The second product, Daybreak Defense Factory, automates the defensive side. AI agents scan a company’s codebase for vulnerabilities and generate patches. The system delivers ready-to-deploy pull requests with fixes and accompanying tests for developer approval. Both products run on OpenAI’s latest cyber model, GPT-6 Cyber. This expansion moves OpenAI from general purpose capabilities into a specific vertical where liability and accuracy are critical. The company is positioning these tools to handle repetitive, high-volume tasks that currently require human analysts. The focus remains on automating the generation and verification of security fixes rather than replacing human oversight entirely.
* Daybreak Red Team operates in Early Access for testing purposes
* Daybreak Defense Factory generates pull requests for developer approval
* Both tools rely on the GPT-6 Cyber model
