OpenAI launches Daybreak Red Team and Defense Factory security tools

OpenAI unveiled two security products, Daybreak Red Team and Daybreak Defense Factory, at an event called Cyber at the Frontier, and Red Team is now accepting early access applications, according to digitaltoday.co.kr. Both are part of the company's Daybreak security platform and target enterprise security teams looking to automate much of the work of finding and fixing vulnerabilities.

Daybreak Red Team uses multiple AI agents to analyze application code and probe whether suspected vulnerabilities can actually be exploited. The agents also review bug bounty reports, vulnerability disclosures and code scanner alerts, and retest fixes once they are in place. To limit exposure, they run in isolated environments and are restricted by a review mechanism called Guardian to approved apps and access points.

From detection to patches

Daybreak Defense Factory handles the other side of the job: turning found vulnerabilities into security patches. It relies on agents built on OpenAI's GPT-6 Cyber model to inspect code repositories and propose fixes, and it can connect to GitHub repositories to monitor new code and schedule regular checks. It also imports vulnerability data from existing security vendors such as Snyk, Endor Labs and Wiz.

Developers keep final authority over changes. They can create GitHub pull request drafts with fixes using OpenAI Codex, and every patch must be reviewed and approved by a human before deployment. Defense Factory is offered as an add-on feature in ChatGPT and can be tried early by companies already using Daybreak.