OpenAI launched two security products, Daybreak Red Team and Daybreak Defense Factory, adding agent-driven penetration testing and automated patching to its Daybreak security platform. The tools debuted at the company's "Cyber at the Frontier" keynote on November 12, a week after OpenAI released its GPT-6 Cyber model.
Daybreak Red Team uses a fleet of OpenAI agents to test companies' web applications for exploitable vulnerabilities. One agent coordinates each assessment, others investigate source code and application context to test attack paths, and reviewer agents check the results so security teams can prioritize which flaws to fix first.
Red Team also helps teams validate vulnerabilities reported by code scanners, bug bounty programs and disclosure reports, then test the patches for those flaws. Nancy Wang, who leads cyber-applied AI at OpenAI, described the product as a "superhuman pen-test at the scale of automated continuous scanning."
Key facts
- 01OpenAI launched Daybreak Red Team and Daybreak Defense Factory at its Cyber at the Frontier keynote on November 12, 2026.
- 02Red Team uses coordinating, investigating and reviewer agents to test web apps for exploitable vulnerabilities.
- 03Defense Factory scans codebases and delivers merge-ready pull requests with a patch and a test, for engineer approval.
- 04Defense Factory runs on agents built on GPT-6 Cyber, which OpenAI released the week before.
- 05Red Team is in early access with select customers and a waitlist; OpenAI has not disclosed pricing.
Daybreak Defense Factory handles the other half of the loop: finding, validating and fixing vulnerabilities at scale. Agents scan codebases, hunt for flaws and develop patches, and engineers review and approve each proposed fix before it reaches production. Wang said engineers receive a merge-ready pull request containing the patch and a test showing that it works.
Defense Factory builds on Codex Security, OpenAI's existing product that scans code as it changes, reviews pull requests and investigates alerts. It runs on agents built on OpenAI's latest cyber model, currently GPT-6 Cyber, and proposes its patches inside Codex.
OpenAI president Greg Brockman framed the launch around the pace of model capability, telling the keynote audience that organizations need to reorient their security practice around what these models can do. He added that security fundamentals remain important and should not be discounted.
“We're now at a point where companies will be secure only to the extent of the frontier model”— Greg Brockman, OpenAI President
Johannes Landgraf, head of cyber at OpenAI, said defenders now have to move faster to keep up. He said Red Team "paves the path for us to dramatically expand the access to our frontier cyber models over time."
“Attackers are able to move faster. I think we see that right now almost on a daily basis”— Johannes Landgraf, Head of cyber at OpenAI
OpenAI is pitching the tools at organizations without deep offensive security benches. Clint Gibler, who leads cybersecurity research at OpenAI, pointed to a long-standing shortage of security expertise, and Fouad Matin, the lab's cyber preparedness and safety lead, cited organizations that might not have red team staff on hand.
Daybreak Red Team is launching in early access with select customers, with a waitlist open now. Defense Factory is available through the Daybreak plugin in Codex. OpenAI did not disclose pricing for either product.
Working on something we should cover, or seeing a story we missed? Send leads, documents, or feedback to hello@aichatdaily.com. For sensitive tips, see our secure tips page for Signal and PGP options.
Spotted an error? Email hello@aichatdaily.com with the URL and the issue, or read our full corrections policy.
