OpenAI launched GPT-6 Cyber, a model built to find and test software holes for security teams that are allowed to use it. OpenAI says it scored 48.5% on ExploitGym, up from 32.1% for GPT-5.6 Cyber, a 51% relative gain. Access starts with approved Daybreak OpenAI's programme that gives approved security teams stronger AI tools to find and fix software bugs. Red customers only.
Key points
- Real systems: OpenAI researchers used it to develop working Exploit A way to use a software bug to make a system do something it shouldn't, like let a stranger in. for 948 Linux Privilege escalation A bug that lets someone gain higher computer access than they are supposed to have. bugs and to find 81 previously unknown high-severity Firefox bugs. Mozilla has begun shipping fixes. Cisco, Calif, CodeRabbit and others say they are using it for research and Code review Checking code someone (or an AI) wrote before it goes live, to catch bugs and risky changes..
- Staying in bounds: OpenAI trained the model to stay inside the task a researcher sets. In one test, it avoided attacking out-of-Scope The exact target a security tester is allowed to attack; going outside it is off-limits. services in 99.93% of runs without a safety prompt, and 100% with the prompt.
- Risk level: OpenAI rates the model Critical for cybersecurity under its Preparedness Framework OpenAI's own scale for how risky a model's skills are in areas such as cyber attacks., up from High for the previous Cyber model. It pairs the release with stronger misuse checks and a path for critical-infrastructure defenders.
- Who can use it: GPT-6 Cyber starts on the API Application programming interface: a door that lets one piece of software ask another for data or actions. and Codex OpenAI's AI coding helper, which can write, fix and test software for you. for a select Daybreak Red group, then expands. Daybreak Blue access for related defender tools is also widening.
Why it matters: Security teams may find bugs faster, but the same Skill A saved, reusable set of instructions (and sometimes code) that an AI agent loads when a task needs it. can be misused. Only approved users get the strongest tools, and ordinary readers should treat viral 'leak' claims with care.





















