GPT-6 Cyber: OpenAI’s New Security Model Explained

GPT-6 Cyber is OpenAI’s new cybersecurity model, introduced on 5 November 2026, and for now it is open only to a select group of approved Daybreak Red customers through the API and Codex.

GPT-6 Cyber: what OpenAI announced

  • The model is built to find and validate exploitable vulnerabilities while staying inside the scope a researcher sets.
  • On ExploitGym, a test of exploiting a specified vulnerability, OpenAI reports 48.5% for GPT-6 Cyber against 32.1% for GPT-5.6 Cyber.
  • In a scope test, OpenAI says the model avoided exploiting out-of-scope services in 99.93% of cases without its deployment prompt, up from 94.49%, and in 100% of cases with the prompt.
  • OpenAI rates the model Critical for cybersecurity under its Preparedness Framework, up from High for GPT-5.6 Cyber.

Results OpenAI cites from its own research

  • Linux: working exploits for 948 kernel vulnerabilities out of 1,724 reproduced, with 304 critical findings disclosed to maintainers along with candidate patches.
  • Firefox: evidence for 81 novel vulnerabilities that Mozilla classed as high severity; OpenAI says Mozilla has started landing fixes.
  • These are OpenAI’s own figures. The company published a system card with the full evaluation settings.

Who can use GPT-6 Cyber, and what to check

  • Access runs through OpenAI’s Daybreak programme. Daybreak Red API access requires IP allowlisting by default, and OpenAI says it will widen access to all Daybreak Red customers soon.
  • Organisations can apply through OpenAI’s Daybreak page. OpenAI’s announcement gives no price and does not name India or any country, so Indian availability is not confirmed.
  • Security teams can treat the announcement as a reminder to keep Linux, Firefox and open-source dependencies patched, the codebases OpenAI’s own tests targeted.

What this means for you: If you run security for an Indian company or maintain open-source code, GPT-6 Cyber is not something you can switch on today unless you are an approved Daybreak customer. The practical step is to apply early and tighten your patch routine now.

GPT-6 Cyber FAQ

What is GPT-6 Cyber?

GPT-6 Cyber is an OpenAI model for finding and validating exploitable software vulnerabilities, announced on 5 November 2026.

Can anyone in India use GPT-6 Cyber?

No, not yet. It is initially limited to approved Daybreak Red customers, and OpenAI’s page does not mention India.

How good is GPT-6 Cyber at exploit tests?

OpenAI reports 48.5% on ExploitGym, up from 32.1% for GPT-5.6 Cyber, based on its own evaluations.

Sources

  • OpenAI – GPT-6 Cyber: Advancing the frontier of aligned cybersecurity agents – 5 November 2026

Related: AI Agent Liability: DSCI Proposes Framework for Who Is Responsible

Last updated: 9 November 2026