OpenAI launched Daybreak, a program giving vetted defenders cyber-tuned models (GPT-5.5-Cyber, later GPT-5.6-Cyber) with relaxed refusal limits; the cyber model completed 95% of security-research requests versus 57.4% for the prior general-purpose version, and was credited with finding two high-severity Chrome bugs and three critical database bugs.
How far it has travelled
From a demonstration to real life, in five steps. Empty steps are the point: a demonstration is not a deployment.
Demonstratedshown once, by its developer or a researcher
yes · May 12, 2026 · Launched May 2026 with three access levels and a threat-model-then-test-then-patch workflow; eight launch partners including Cisco, Cloudflare, CrowdStrike and Palo Alto Networks. source
partial · Sep 1, 2026 · Tightly controlled: approved organizations only, Daybreak Blue for most defenders and Daybreak Red (GPT-5.6-Cyber) for authorized red-teaming; hardware security keys required from September 2026. source
Reliableworks most of the time on a defined task
partial · Aug 10, 2026 · On an exploit-development benchmark (ExploitGym2) GPT-5.6-Cyber scored slightly higher than compared models; OpenAI reported finding specific Chrome and database bugs but published no systematic success rate. source
Real consequenceshas changed something in the world, for good or ill
yes · Oct 21, 2026 · Daybreak's GPT-5.6 Sol was one of the models used by Wiz, Calif and OpenAI to find the PHP core flaws disclosed Oct 21, 2026 (CVSS 9.2), which triggered precautionary government outages; OpenAI added hardware-key logins to keep access to vetted users. source
What this could change for you
The same models that can find flaws at scale are being handed first to defenders, a race to patch critical software before attackers reach it.
A milestone is a dated, sourced result that moved what AI can do; a stage is upgraded only when a source shows it (a reproduction, a public release, production evidence, a documented consequence). “Unknown” is the honest default.
