OpenAI launches security products, tells orgs they’re doomed if they don’t use them

OpenAI launched two security products, Daybreak Red Team and Daybreak Defense Factory, part of its Daybreak security platform, with Red Team in early access and Defense Factory built on OpenAI's GPT-6 Cyber model, as President Greg Brockman said at a Thursday keynote that "companies will be secure only to the extent of the frontier model that they use to defend themselves." The same day, nonprofits Irreplaceable Education Fund, Public Citizen, Heat Initiative and The Alliance for Secure AI sued OpenAI, Anthropic, Google, Meta and SpaceX's AI businesses in San Francisco Superior Court, seeking to halt development or deployment of AI systems more capable than their most advanced existing models, citing incidents including OpenAI agents accessing Hugging Face and an Australian government portal holding Medicare statistics.

OpenAI launches security products, tells orgs they’re doomed if they don’t use them The Register https://www.theregister.com Meanwhile, a group of nonprofits sue AI giants and cite AI-driven cyberattacks OpenAI https://www.machinebrief.com/glossary/openai has launched two new security products, one for penetration testing and another for defense, and warned organizations that their businesses are only safe if they use tools like these. “We're now at a point where companies will be secure only to the extent of the frontier model that they use to defend themselves and how well they utilize that,” OpenAI President Greg Brockman said during a Thursday keynote address. The co-founder of the company that broke security https://www.theregister.com/ai-and-ml/2026/10/23/red-team-report-found-openai-utterly-failed-to-monitor-its-agents-during-hugging-face-attack/5305200 did admit that security “fundamentals are important, and not to be discounted.” However, “you need to really reorient your security practice around what these models can do,” Brockman said, with zero irony, and presumably talking about using AI models for defense - not for hacking other organizations https://www.theregister.com/security/2026/10/02/openai-alerts-100-orgs-that-its-misaligned-models-attempted-to-break-in-or-worse/5300891 . “Also very important is product.” This product, of course, should come from OpenAI, and, to that end, the company rolled out Daybreak Red Team and Daybreak Defense Factory, which are both part of OpenAI’s Daybreak security platform. Red Team https://openai.com/daybreak/red-team/ , which is available in early access, uses OpenAI models to test companies’ web applications for vulnerabilities. Nancy Wang, who leads cyber-applied AI, described it as “superhuman pen-test at the scale of automated continuous scanning,” with a fleet of agents using source code and app context to investigate and test attack paths. It also helps security teams validate reported vulnerabilities - from code scanners, bug bounty programs, and disclosure reports - and then test the patches for these flaws. The second product, Daybreak Defense Factory https://openai.com/daybreak/defense-factory/ , automates the “defensive loop” by “finding, validating, and fixing vulnerabilities at scale.” This one also uses agents built on OpenAI’s latest cyber models - currently, that’s GPT-6 Cyber https://www.theregister.com/security/2026/11/05/openai-releases-gpt-6-cyber-and-promises-this-one-stays-within-rules-of-engagement/5307855 . The agents scan organizations’ codebases, hunting for vulnerabilities and developing patches. Engineers review and approve the proposed fixes before they go into production. “This way engineers get a merge-ready pull request with the patch and a test that shows that it works,” Wang said. Meanwhile, as OpenAI execs touted the new security products, a coalition of nonprofits filed a lawsuit in San Francisco Superior Court asking a judge to stop OpenAI, Anthropic https://www.machinebrief.com/glossary/anthropic , Google, Meta, and SpaceX's AI businesses from developing or deploying AI systems more capable than their most advanced existing models. The lawsuit https://www.platkinllp.com/wp-content/uploads/2026/11/Irreplaceable-et-al.-v.-Anthropic-et-al.-FINAL-AS-FILED.pdf , filed by Irreplaceable Education Fund, Public Citizen, Heat Initiative, and The Alliance for Secure AI, cites incidents involving OpenAI agents accessing Hugging Face https://www.theregister.com/security/2026/08/06/openai-reveals-its-rogue-agent-swarm-went-a-little-bit-borg-ahead-of-hugging-face-hack/5283741 , gaining unauthorized access to an Australian government portal containing Medicare statistics https://www.theregister.com/security/2026/09/24/openai-agents-infiltrated-australian-government-website/5298702 , and other AI-related cybersecurity incidents https://www.theregister.com/ai-and-ml/2026/09/28/openai-gpt-6-astra-really-good-at-supply-chain-attacks-uk-gov-warns/5299588 . “Defendants tell us that the AI technology they are developing poses catastrophic risks to the public, including by enabling AI-driven cyberattacks and bioweapons,” the court documents allege, adding that the AI companies “are not wrong.” ® Get AI news in your inbox Daily digest of what matters in AI. Key Terms Explained Anthropic https://www.machinebrief.com/glossary/anthropic An AI safety company founded in 2021 by former OpenAI researchers, including Dario and Daniela Amodei. GPT https://www.machinebrief.com/glossary/gpt Generative Pre-trained Transformer. Hugging Face https://www.machinebrief.com/glossary/hugging-face The leading platform for sharing and collaborating on AI models, datasets, and applications. OpenAI https://www.machinebrief.com/glossary/openai The AI company behind ChatGPT, GPT-4, DALL-E, and Whisper.