Taking on Mythos: OpenAI rolls out cyberdefence model Daybreak to speed up software security fixes

OpenAI has introduced Daybreak, a new cybersecurity effort aimed at helping organisations find and fix software security flaws faster. The company said the initiative focuses on speeding up the process of patching vulnerabilities, which it believes have become the biggest challenge in cybersecurity today.

According to the company, the focus no longer remains on discovering flaws, but rather, on fixing them before they can be exploited by an attacker. As artificial intelligence (AI) becomes better at finding bugs in software, security teams are being flooded with vulnerability reports.

As part of Daybreak, OpenAI has also updated its Codex Security tool. The tool can scan software code, identify possible vulnerabilities, understand how attackers could exploit them, generate patches and help developers validate fixes. Codex Security has already scanned more than 30,000 code repositories and over 30 million code commits. It has also helped identify more than 500,000 fixed security findings.


Aside from the Codex Security tool, OpenAI has also released the full version of GPT-5.5-Cyber, an AI model specifically curated for cybersecurity work. This model analyses large codebases, investigates vulnerabilities, tests fixes, and supports security researchers. Access to this model remains limited to trusted and verified cybersecurity professionals.

A major part of this effort is “Patch the Planet,” a programme launched with security partners, including Trail of Bits and HackerOne. The programme is meant to help maintainers of widely used open-source software to move from ‘findings to fixes.’ More than 30 open-source projects, including Python, Go, cURL and Sigstore, have agreed to take part.

Alongside these efforts, the company has also unveiled the Daybreak Cyber Partner Program, which lets the cybersecurity firms integrate its defensive AI models into their products and services. The company says it is working with industry partners and governments to improve cyber defence capabilities.