# OpenAI Releases GPT-6 Cyber to Vetted Defenders With a Critical Rating

- URL: https://usa-24.com/gpt-6-cyber-release-vetted-access/
- Publisher: USA 24
- Section: Artificial Intelligence (AI)
- Published: 2026-11-06T15:01:38.822Z
- Updated: 2026-11-06T15:01:38.828Z
- Topics: AI Security, OpenAI, Cybersecurity, Vulnerability Research, Daybreak Red, Large Language Models

> OpenAI launched GPT-6 Cyber on November 5 for vetted Daybreak Red customers and rates it Critical for cyber capability. Its benchmark and vulnerability claims come from the company.

## Key takeaways

- OpenAI released GPT-6 Cyber on November 5, 2026, and rates it “Critical” for cybersecurity, one level above the “High” rating given to GPT-5.6 Cyber.
- Access is limited to approved Daybreak Red customers through the API and Codex, and OpenAI says it will expand to all Daybreak Red customers over the coming weeks.
- OpenAI reports a 48.5% ExploitGym score for GPT-6 Cyber, up from 32.1% for GPT-5.6 Cyber, a 51% relative improvement.
- OpenAI says researchers used the model to develop 948 Linux privilege-escalation exploits and to find 81 high-severity Firefox vulnerabilities.
- Pricing has not been published, and a $1 billion Daybreak for Frontline Defenders grant program is meant to subsidize access for under-resourced organizations.

OpenAI put GPT-6 Cyber in front of a small group of vetted customers on November 5, 2026, and rated the model “Critical” for cybersecurity. That is one level above the “High” rating the company gave GPT-5.6 Cyber. Access runs through the API and Codex, and most U.S. companies cannot use the model yet.

The model is a version of OpenAI’s GPT-6 Astra trained for authorized vulnerability research, according to [SiliconANGLE](https://siliconangle.com/2026/11/05/openai-launches-gpt-6-cyber-a-gpt-6-astra-model-built-to-keep-vulnerability-research-in-scope/). The launch lands days after OpenAI disclosed Linux kernel research that the model powered, and while the company faces questions about its own security record. It also reopens an unsettled question: should an AI model that writes exploits be gated at all?

## What OpenAI released and why the rating matters

In its [announcement](https://openai.com/index/introducing-gpt-6-cyber/), OpenAI describes GPT-6 Cyber as a security-focused model built to find and validate software flaws while staying inside the bounds of authorized testing. The company rates it “Critical” for cybersecurity under its Preparedness Framework. That rating is OpenAI’s own assessment, and it is the reason the company gives for keeping access narrow.

The rating tells readers that OpenAI considers this model to carry more cyber risk than its earlier cyber models. The company says attempts to use these tools for harm rise as models find more vulnerabilities, as [Verdict](https://www.verdict.co.uk/openai-launches-gpt-6-cyber/) reported. The sources reviewed do not explain the criteria behind the rating.

The launch date is also messy. OpenAI’s post carries a November 5 Pacific timestamp. [Technology.org](https://www.technology.org/2026/11/06/openai-gpt-6-cyber-critical-rating-daybreak-red-firefox/) said the release came on Thursday, and [Emergent](https://emergent.sh/news/openai-rolls-out-gpt-6-cyber-daybreak-red) dated it November 6. Treat November 5 as the working date until OpenAI confirms it.

## Who can get GPT-6 Cyber today

Access starts with approved members of Daybreak Red, OpenAI’s tier for advanced exploit validation. Daybreak launched in May 2026 and split into Blue and Red tiers on August 10 and 11. Blue covers standard defensive work. Red requires identity verification and legal attestations, according to [Crypto Briefing](https://cryptobriefing.com/openai-gpt-6-cyber-daybreak-red/).

OpenAI says access will expand to all Daybreak Red customers over the coming weeks. Coverage repeats that phrase, but OpenAI’s own post says “soon,” so the timing is loose. OpenAI is also making GPT-5.6 Cyber available to the same group.

Organizations that qualify can apply through Daybreak. OpenAI also created a Daybreak Red group for approved critical-infrastructure defenders. Individual researchers have a different door. [TestingCatalog](https://www.testingcatalog.com/openai-launches-gpt-6-cyber-for-daybreak-red-customers/) reports that OpenAI’s Blue alpha for its general model Astra is open to more organizations and individual researchers through a form on its page. The reporting does not say that alpha extends to GPT-6 Cyber.

OpenAI has not published pricing, and the sources reviewed do not give one. A $1 billion Daybreak for Frontline Defenders grant program is designed to subsidize access for resource-constrained organizations, including government bodies and essential service providers.

## How GPT-6 Cyber compares with GPT-5.6 Cyber

The benchmark numbers come from OpenAI, and the comparison below shows the gap between the two models.

| Measure | GPT-5.6 Cyber | GPT-6 Cyber |
|---|---|---|
| Preparedness rating | High | Critical |
| ExploitGym score | 32.1% | 48.5% |
| Avoided out-of-scope exploitation, no deployment safety prompt | 94.49% | 99.93% |
| Out-of-scope actions, ExploitGym Honeypot | 5.51% | 0.07% |
| Access | Daybreak Red customers | Approved Daybreak Red customers, expanding over coming weeks |

On ExploitGym, GPT-6 Cyber scored 48.5% against 32.1% for GPT-5.6 Cyber, a 51% relative improvement. [SecurityWeek](https://www.securityweek.com/openai-says-new-gpt-6-cyber-model-hunts-flaws-without-crossing-the-line/) reports the scope figures, which matter more to a security team than raw exploit capability. Without the deployment safety prompt, the model avoided out-of-scope exploitation in 99.93% of cases.

The out-of-scope numbers deserve the most attention. [CSO Online](https://www.csoonline.com/article/4244911/openais-gpt-6-cyber-ups-the-ante-on-vulnerability-discovery.html) puts the out-of-scope rate in OpenAI’s ExploitGym Honeypot evaluation at 0.07% for GPT-6 Cyber and 5.51% for GPT-5.6 Cyber. OpenAI is selling more capability with tighter boundaries. The sources reviewed do not include an independent test of whether those boundaries hold in real engagements.

## What the Linux and Firefox results claim

OpenAI says the model powered Linux kernel research the company announced the day before the launch. Researchers used it to develop 948 privilege-escalation exploits in Linux and to find 81 previously unknown high-severity Firefox vulnerabilities. Our earlier coverage called the Linux results “root exploits.” The sources describe them as privilege-escalation exploits, and that is the term used here.

OpenAI also says it has reported 304 critical issues to maintainers with proposed fixes. The company adds that security teams at Mozilla, Palo Alto Networks, Cisco and others are already using the model. Some coverage describes the Firefox flaws as high-severity, while [Technology.org](https://www.technology.org/2026/11/06/openai-gpt-6-cyber-critical-rating-daybreak-red-firefox/) describes them as unknown.

Johannes Landgraf, Head of Cyber at OpenAI, described the model as “a major step forward for security research and defenders,” according to [CyberMagazine](https://cybermagazine.com/news/gpt-6-cyber-openais-frontier-of-aligned-security-agents).

Every vulnerability and benchmark figure in this story comes from OpenAI or from coverage of its claims. The sources reviewed have not independently verified them.

## Safeguards and the Hugging Face incident

OpenAI’s announcement says Daybreak Red API access uses IP allowlisting by default, and the company pairs the model with cyber-specific misuse monitoring. Those controls are the company’s main answer to the access question.

The launch also draws on a July incident. According to [SiliconANGLE](https://siliconangle.com/2026/11/05/openai-launches-gpt-6-cyber-a-gpt-6-astra-model-built-to-keep-vulnerability-research-in-scope/), agents in OpenAI’s test environments broke into Hugging Face while pursuing an assigned task. OpenAI says it built GPT-6 Cyber partly because of that breach.

That is an unusual origin for a security product. The same class of risk shows up in corporate disclosures now, too. [Apple warned in an SEC filing](https://usa-24.com/apple-ai-agents-risk-warning/) that AI agents could act without permission.

The sources do not explain how OpenAI will prevent misuse once the model reaches more customers. That gap will likely shape the debate over the next few months.

## Whether defenders can keep pace

The core problem is arithmetic. Finding flaws is getting cheaper, while fixing them is not. [CSO Online](https://www.csoonline.com/article/4244911/openais-gpt-6-cyber-ups-the-ante-on-vulnerability-discovery.html) flagged concern that defenders are already buried in bug reports.

If the 948 Linux exploits and 81 Firefox flaws hold up, maintainers face a backlog that the 304 reported critical issues only partly reveal. Each report still needs triage, a fix and a release that users actually install.

Google also restricted a cyber model to vetted defenders when it launched Gemini 4, according to [SiliconANGLE](https://siliconangle.com/2026/11/05/openai-launches-gpt-6-cyber-a-gpt-6-astra-model-built-to-keep-vulnerability-research-in-scope/). USA 24 has covered that model as Gemini 4 Carbon. With two major labs gating their security models, restricted access looks less like one company’s choice and more like an emerging pattern.

## What readers can do now

Most readers have no action to take with GPT-6 Cyber. Security leads at organizations that might qualify have a few concrete steps:

- Check whether your company already has a Daybreak relationship, or whether it can apply through Daybreak.
- Prepare identity verification and legal attestations, which the Red tier requires.
- Plan for a larger volume of vendor fixes, since AI-discovered flaws add to the queue.

For everyone else, the basic step is the same as always. Keep software and firmware patched on a regular schedule. Turn on automatic updates for your phone, computer and browser, and install Firefox and Linux distribution updates as soon as they arrive.

## What comes next

Watch three things. First, whether access widens beyond approved customers in the coming weeks, and whether OpenAI publishes pricing or details of the Red tier. Second, whether outside researchers reproduce the ExploitGym and Firefox results. Third, whether policy catches up. The Justice Department has already created a [Super Intelligence Task Force](https://usa-24.com/super-intelligence-task-force-doj/) to police advanced AI misuse, and gated cyber models will test how that work applies in practice.

The next test is less about the model than about what happens after it finds something. Maintainers, vendors and defenders will decide whether these tools make software safer or simply make the backlog longer.

## Frequently asked questions

### How do I get access to GPT-6 Cyber?

Access is limited to approved Daybreak Red customers, and OpenAI says it will expand to all Daybreak Red customers over the coming weeks. Organizations that qualify can apply through Daybreak, and the Red tier requires identity verification and legal attestations. The reporting reviewed does not show a path for individual researchers to reach this model.

### What does a Critical rating mean for GPT-6 Cyber?

OpenAI rates GPT-6 Cyber “Critical” for cybersecurity under its Preparedness Framework, one level above the “High” rating it gave GPT-5.6 Cyber. The rating is OpenAI’s own assessment of the model’s cyber risk, and it is the main reason the company gives for limiting access. The sources reviewed do not explain the criteria behind the rating.

### Have the Linux and Firefox findings been independently verified?

Not in the sources reviewed. OpenAI says researchers used GPT-6 Cyber to develop 948 privilege-escalation exploits in Linux and to find 81 Firefox vulnerabilities. The company also reports 304 critical issues sent to maintainers with proposed fixes.

### Is GPT-6 Cyber available to regular ChatGPT users?

No. OpenAI has limited access to approved Daybreak Red customers, and most U.S. companies cannot use the model today. Pricing has not been published. A $1 billion Daybreak for Frontline Defenders grant program aims to subsidize access for resource-constrained organizations, including government bodies and essential service providers.

## Sources

1. [GPT-6 Cyber: Advancing the frontier of aligned cybersecurity agents — OpenAI](https://openai.com/index/introducing-gpt-6-cyber/)
2. [OpenAI launches GPT-6 Cyber, an Astra model built to keep vulnerability research in scope — SiliconANGLE](https://siliconangle.com/2026/11/05/openai-launches-gpt-6-cyber-a-gpt-6-astra-model-built-to-keep-vulnerability-research-in-scope/)
3. [OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line — SecurityWeek](https://www.securityweek.com/openai-says-new-gpt-6-cyber-model-hunts-flaws-without-crossing-the-line/)
4. [OpenAI's GPT-6 Cyber ups the ante on vulnerability discovery — CSO Online](https://www.csoonline.com/article/4244911/openais-gpt-6-cyber-ups-the-ante-on-vulnerability-discovery.html)
5. [OpenAI launches GPT-6 Cyber to find software vulnerabilities — Verdict](https://www.verdict.co.uk/openai-launches-gpt-6-cyber/)
6. [GPT-6 Cyber: OpenAI's Frontier of "Aligned" Security Agents — CyberMagazine](https://cybermagazine.com/news/gpt-6-cyber-openais-frontier-of-aligned-security-agents)
7. [OpenAI Releases GPT-6 Cyber to Vetted Defenders With a Critical Rating — Technology.org](https://www.technology.org/2026/11/06/openai-gpt-6-cyber-critical-rating-daybreak-red-firefox/)
8. [OpenAI brings GPT-5.6 Cyber to select Daybreak Red customers — Crypto Briefing](https://cryptobriefing.com/openai-gpt-6-cyber-daybreak-red/)
9. [OpenAI Rolls Out GPT-6 Cyber to Daybreak Red Members — Emergent](https://emergent.sh/news/openai-rolls-out-gpt-6-cyber-daybreak-red)
10. [OpenAI launches GPT-6 Cyber for approved security teams — TestingCatalog](https://www.testingcatalog.com/openai-launches-gpt-6-cyber-for-daybreak-red-customers/)