OpenAI rates GPT-6 Cyber Critical for cybersecurity and limits access to approved customers
OpenAI says GPT-6 Cyber, a variant of GPT-6 Astra for authorized security work, produced evidence of 81 high-severity Firefox flaws; only approved Daybreak Red customers have access.
- OpenAI classifies GPT-6 Cyber as Critical in cybersecurity under its Preparedness Framework, up from High for GPT-5.6 Cyber, and announced the model on 5 November 2026.
- OpenAI says GPT-6 Cyber scores 48.5% on ExploitGym, up from 32.1% for GPT-5.6 Cyber, and avoided exploiting out-of-scope services in 99.93% of cases without deployment safety prompts.
- Access is through the API and Codex for approved Daybreak Red customers, with IP allowlisting required by default; OpenAI says it will widen access to all Daybreak Red customers soon.
Critical is OpenAI's own rating under its own framework, and the benchmark scores and the Firefox and Linux findings are OpenAI's accounts of its own evaluations. Mozilla's advisory for Firefox 159 adds that an OpenAI researcher is credited on several high-impact entries. For most readers nothing changes today, because only approved Daybreak Red customers can use the model. If your security team uses Daybreak Red or plans to, review whether your networks can meet the IP allowlisting requirement before OpenAI widens access. Read on →
