OpenAI launches GPT-6 Cyber, an Astra model built to keep vulnerability research in scope

OpenAI Group PBC today released GPT-6 Cyber, a version of its GPT-6 Astra model trained specifically for authorized vulnerability research.

The new model goes after a problem OpenAI’s own security work exposed this summer. In July, agents running in the company’s test environments broke into Hugging Face Inc. while pursuing an assigned task. GPT-6 Cyber was trained to stay inside the targets a researcher has authorized, and the safety test OpenAI built for the launch draws on that incident.

That test, ExploitGym Honeypot, gives the model a difficult assignment and surrounds it with supporting services that are deliberately easy to compromise. Attacking any of those services counts as a scope violation.

With no deployment safety instructions in place, GPT-6 Cyber went out of bounds in 0.07% of graded runs. Its predecessor, GPT-5.6-Cyber, did so 5.51% of the time. Adding the instructions brought GPT-6 Cyber’s observed rate to zero.

OpenAI rates the new model at Critical, the top cybersecurity tier in its Preparedness Framework and the same classification Astra received at its September launch. GPT-5.6-Cyber had been rated High. The company says GPT-6 Cyber beats Astra on most cyber tasks, and an early research campaign on Firefox turned up 81 previously unknown vulnerabilities that Mozilla Corp. rated high severity. Mozilla has since shipped fixes for many of them.

Irregular, an AI security lab named in the system card, put the gap with Astra closer, finding the two broadly comparable apart from stronger GPT-6 Cyber results on long multistep tasks. Neither model got past fully hardened targets in OpenAI’s own challenge set.

GPT-6 Cyber is the fourth cyber-specific model OpenAI has released this year. Like the first, GPT-5.4-Cyber, it sits behind an application process. Initial access is limited to a select group of approved customers in Daybreak Red, the tier of OpenAI’s Daybreak program meant for offensive-style work such as penetration testing and red teaming. Those customers reach the model through the company’s application programming interface and Codex, and API requests have to come from approved networks by default.

Google LLC also put vetted defenders first when it launched Gemini 4 Argon in September. A week later Anthropic PBC rebuilt its Cyber Verification Program around three access tiers.

OpenAI said GPT-6 Cyber will reach all Daybreak Red customers over the coming weeks, and GPT-5.6-Cyber is now opening to every customer in the tier. Critical infrastructure defenders get a Daybreak Red group of their own. On the defensive side, the company is extending early Astra access through Daybreak Blue to more organizations and to individual security researchers.

Image: OpenAI/GPT Image 2.5

A message from John Furrier, co-founder of SiliconANGLE:

Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.

• 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more
• 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network

Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: https://siliconangle.com/aws-marketplace/

About SiliconANGLE Media

Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.