# OpenAI Restricts GPT-5.5 Cyber to 'Trusted Defenders' — Mirroring Anthropic's Mythos Access Model

> OpenAI's frontier cyber model goes behind a vetted-defender gate, weeks after Sam Altman publicly mocked Anthropic for doing the same with Mythos.

- Org: OpenAI
- Date: 2026-04-30
- Category: model, security
- Source: https://techcrunch.com/2026/04/30/after-dissing-anthropic-for-limiting-mythos-openai-restricts-access-to-cyber-too/
- Canonical page: https://ai-tldr.dev/releases/openai-gpt-5-5-cyber-trusted-access/

## In short

OpenAI is gating GPT-5.5 Cyber — a frontier variant tuned for penetration testing, vulnerability identification, and exploit-chain research — behind a new Trusted Access for Cyber program limited to vetted defenders.

## What it is

GPT-5.5 Cyber is a specialised build of OpenAI's GPT-5.5 flagship aimed at offensive-security workflows: penetration testing, vulnerability identification and exploitation, and malware reverse engineering. The GPT-5.5 system card classifies its cyber capability as 'High' — strong enough that OpenAI is no longer comfortable shipping the unrestricted version through the standard API, and is instead distributing it through a new Trusted Access for Cyber (TAC) program.

## How it works

Defenders apply via openai.com with credentials and a planned use case. Approved customers — government agencies, critical-infrastructure operators, security vendors, cloud platforms, and financial institutions — receive an identity-gated build with fewer cyber safeguards. Standard API users keep the safety-tuned GPT-5.5; only TAC participants get the permissive build cleared for end-to-end cyber operations and exploit chaining. OpenAI says it will scale defensive access and safeguards together as model capability grows.

## Why it matters

It's the first time OpenAI has gated a frontier capability behind an identity-checked program — exactly the model Anthropic uses for Claude Mythos and one Sam Altman called 'fear-based marketing' weeks ago. The reversal sets up a two-tier cyber API: vetted defenders move faster, public users sit behind tighter rails. It also tests whether 'trusted' actually keeps offensive use out, given Mythos already leaked to an unauthorised group.

## Who it's for

SOC teams, security vendors, government cyber defenders, AI policy watchers.

## Try it

Application form linked from the OpenAI Trusted Access for Cyber announcement page.

## Links

- [TechCrunch Coverage](https://techcrunch.com/2026/04/30/after-dissing-anthropic-for-limiting-mythos-openai-restricts-access-to-cyber-too/)
- [GPT-5.5 Cyber System Card](https://deploymentsafety.openai.com/gpt-5-5/cybersecurity)
- [GPT-5.5 Deployment Safety](https://deploymentsafety.openai.com/gpt-5-5)
- [Techzine Coverage](https://www.techzine.eu/news/security/140927/openai-prepares-gpt-5-5-cyber-for-trusted-security-researchers/)