Can anyone use Daybreak Red Team now?

No. OpenAI launched Daybreak Red Team in early access on November 12, 2026, so it is not open to every customer yet. The Register and Cybersecurity News both describe it as an early-access product, and neither report gives a date for general availability or a public price.

Does Daybreak Defense Factory push fixes to production by itself?

No. Daybreak Defense Factory prepares changes but does not deploy them. According to OpenAI's Nancy Wang, engineers receive a merge-ready pull request with the patch and a test showing the fix works, and they review and approve the change before it goes into production.

Which AI models power the new Daybreak products?

Daybreak Red Team uses OpenAI models to examine web applications, and Daybreak Defense Factory runs agents built on OpenAI's latest cyber models, which The Register names as GPT-6 Cyber. GPT-6 Cyber is the cyber-tuned version of GPT-6 Astra that OpenAI released to vetted Daybreak Red customers on November 5.

How is Daybreak Red Team different from a normal vulnerability scanner?

Daybreak Red Team goes past a scanner alert and tests whether a reported issue is a real, exploitable risk. Its agents use source code and app context to try attack paths, and it can also validate findings from scanners, bug bounty programs and disclosure reports, then retest the patches for those flaws.

OpenAI · 2026-11-12 · major

Daybreak Red Team and Defense Factory — OpenAI's agents test and patch apps

In short

OpenAI launched two Daybreak security products. Daybreak Red Team, in early access, uses agents to pen-test web apps. Daybreak Defense Factory finds, checks and fixes flaws in code and hands engineers a pull request to approve.

OpenAI · 2026-11-12 · 3 sources checked

The Register's illustration for its story on OpenAI's new Daybreak security products

OpenAI's Daybreak platform adds an agent pen-tester for web apps and an agent pipeline that fixes code flaws.

Quick facts

Maker	OpenAI
Announced	Nov 12, 2026, Cyber at the Frontier
Daybreak Red Team	Agent pen-testing of web apps, early access
Daybreak Defense Factory	Finds, validates and fixes code flaws
Models	OpenAI cyber models, including GPT-6 Cyber
Human control	Engineers approve fixes before production

What is it?

Daybreak Red Team and Daybreak Defense Factory are two new OpenAI security products, announced on November 12, 2026 at OpenAI's Cyber at the Frontier event. Red Team, in early access, tests web applications for vulnerabilities. Defense Factory runs the defensive loop of finding, validating and fixing vulnerabilities across an organization's codebases.

How does it work?

In Red Team, a fleet of agents uses the app's source code and context to investigate and test attack paths, and it can check findings from code scanners, bug bounty programs and disclosure reports, then retest the patches. Defense Factory's agents, built on OpenAI's cyber models including GPT-6 Cyber, scan codebases and write patches; the output is a merge-ready pull request with the fix and a test that shows it works.

Why does it matter?

Security teams get flooded with scanner alerts and bug reports that may or may not be real. These products aim to confirm which issues can actually be exploited and to prepare tested fixes, while a human engineer still approves every change before it reaches production.

Who is it for?

application security and vulnerability management teams

Frequently asked questions

Can anyone use Daybreak Red Team now?: No. OpenAI launched Daybreak Red Team in early access on November 12, 2026, so it is not open to every customer yet. The Register and Cybersecurity News both describe it as an early-access product, and neither report gives a date for general availability or a public price.
Does Daybreak Defense Factory push fixes to production by itself?: No. Daybreak Defense Factory prepares changes but does not deploy them. According to OpenAI's Nancy Wang, engineers receive a merge-ready pull request with the patch and a test showing the fix works, and they review and approve the change before it goes into production.
Which AI models power the new Daybreak products?: Daybreak Red Team uses OpenAI models to examine web applications, and Daybreak Defense Factory runs agents built on OpenAI's latest cyber models, which The Register names as GPT-6 Cyber. GPT-6 Cyber is the cyber-tuned version of GPT-6 Astra that OpenAI released to vetted Daybreak Red customers on November 5.
How is Daybreak Red Team different from a normal vulnerability scanner?: Daybreak Red Team goes past a scanner alert and tests whether a reported issue is a real, exploitable risk. Its agents use source code and app context to try attack paths, and it can also validate findings from scanners, bug bounty programs and disclosure reports, then retest the patches for those flaws.