OpenAI released GPT-6 Cyber on November 5, a cybersecurity-specialised version of GPT-6 Astra built to find vulnerabilities, develop working exploits and propose patches. OpenAI rates it Critical for cybersecurity under its Preparedness Framework, up from High for GPT-5.6 Cyber, and is limiting it at first to a select group of approved Daybreak Red customers through the API and Codex.

The headline results are OpenAI's own: 48.5% on ExploitGym, against 42.4% for GPT-6 Astra and 32.1% for GPT-5.6 Cyber, plus 81 previously unknown Firefox vulnerabilities Mozilla rated high severity. In the Linux kernel work OpenAI reported on November 4, the model family reproduced 1,724 vulnerabilities and produced working exploits for 948 distinct local privilege-escalation flaws.

Scope control is the other half of the launch: in OpenAI's honeypot tests GPT-6 Cyber strayed into off-limits systems in 0.07% of runs, down from 5.51% for GPT-5.6 Cyber. Access requires identity checks, single sign-on, multi-factor authentication and API IP allowlisting by default, and OpenAI says it will expand to all approved Daybreak Red customers in the coming weeks, with GPT-5.6 Cyber opening to the whole tier at the same time.