OpenAI has introduced two new Daybreak cybersecurity products that use AI agents to test web applications for vulnerabilities and help security teams develop fixes.
The products, Daybreak Red Team and Daybreak Defense Factory, were announced at the company’s Cyber at the Frontier event on November 12. Red Team focuses on penetration testing and vulnerability validation, while Defense Factory investigates security findings and prepares patches.
Daybreak Red Team uses multiple AI agents to identify and investigate potential security weaknesses in web applications. “Agents use source code and app context to investigate attack paths and confirm vulnerabilities,” OpenAI says.
The product can examine findings from code scanners, bug bounty submissions, and vulnerability disclosure reports.
OpenAI says the agents operate in isolated environments, with Guardian review enforcing testing boundaries and controlling which applications and endpoints they can access.
Daybreak Defense Factory, meanwhile, is designed to help organizations address vulnerabilities identified by their security tools.
“Agents trace vulnerabilities through your code and develop patches. Engineers review and test proposed patches before merge,” OpenAI explains.
Defense Factory can investigate findings from Daybreak Red Team and other security products, and supports importing vulnerability information from Wiz, Snyk, and Endor Labs. The product can scan connected GitHub repositories, monitor new commits, and perform scheduled security assessments.
Engineers can examine supporting evidence, modify proposed patches using Codex, and create draft GitHub pull requests. However, patches are not deployed automatically.
OpenAI is accepting requests for early access to Daybreak Red Team. Defense Factory is offered through a preview plugin in ChatGPT for workspaces with Daybreak access.
Related: OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line
Related: OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions
Related: OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks
