The cybersecurity world is rapidly changing—threat actors will increasingly use AI to conduct cyberattacks at unprecedented speed and scale, including in fully autonomous ways. As these capabilities spread, defenders have a narrowing window to prepare. Our answer is to put frontier intelligence in the hands of trusted defenders everywhere before attackers deploy offensive AI capabilities at scale. We’re expanding Open AI Daybreak with two access tiers designed to give approved defenders the right capabilities for their work: Daybreak Blue provides access to frontier general-purpose models, including GPT‑5.6 Sol, with safeguards tailored to authorized defensive security work. Daybreak Red provides access to our purpose-trained cybersecurity models for authorized vulnerability research, exploit validation, and security testing.

We’re also introducing GPT‑5.6‑Cyber, available through Daybreak Red. Built on GPT‑5.6 Sol, it is trained to improve capabilities on several specialized cybersecurity tasks (e.g., finding zero-day vulnerabilities and developing exploit chains) and to reduce refusals for certain higher-risk, dual-use cyber tasks. Daybreak Blue access removes system-level guardrails that can block legitimate defensive work, helping defenders with incident detection, investigations, and vulnerability management. Even without guardrails, GPT‑5.6 Sol still refuses some highly dual-use prompts; GPT‑5.6‑Cyber further reduces refusals.

To measure the reduced refusal rate, we created an internal Advanced Cybersecurity Completion Rate. GPT‑5.6‑Cyber completes 95.0% of these requests, compared with just 1.5% for GPT‑5.6 Sol, and 2.0% when used with Daybreak Blue access. It also completes more than GPT‑5.5‑Cyber at 57.3%, addressing feedback from security researchers who encountered persistent refusals with the earlier model.