TL;DR · 30-second read
The Short Version
OpenAI, the company behind ChatGPT, has released a version of its artificial intelligence built for computer security professionals.
Its regular version turns down almost every request to help break into computer systems. In the company’s own tests it finished just 1.5 of every 100 such tasks. The new security version finished 95 of every 100.
The reasoning is that defenders have to think like attackers to find weak spots first. That shifts the safety question from what the software refuses to who is allowed to use it, and OpenAI is widening that circle.
SecurityWeek reported that OpenAI announced GPT-5.6-Cyber on Monday, August 10, 2026. It is a cybersecurity-focused AI model that OpenAI describes as designed for “advanced, authorized cybersecurity work.” The model is built on GPT-5.6-Sol and trained for specialized tasks such as finding zero-days (previously unknown software flaws) and building exploit chains (sequences of attacks that together compromise a system). OpenAI also configured it with a lower refusal rate for dual-use requests.
OpenAI also expanded its Daybreak Cyber Partner program, the channel through which it gives more organizations access to its security AI. In the company’s own testing, GPT-5.6-Cyber completed 95% of prompts involving exploit chain development, privilege escalation and authentication bypass. GPT-5.6-Sol completed 1.5% of the same prompts, and the earlier GPT-5.5-Cyber completed 57.3%.
Executive Summary
OpenAI has built a second version of its flagship model that differs from the first mainly in what it will agree to do. On offensive-security tasks, the general-purpose GPT-5.6-Sol refuses almost everything. GPT-5.6-Cyber, built on the same model, completes nearly everything. OpenAI says the change responds to security researchers who hit persistent refusals with the previous cyber model.
This matters because it changes where the safeguard sits. A model that completes 95% of exploit-development requests cannot rely on refusals to keep it out of the wrong hands. The protection now depends on authorization: which organizations are admitted through the Daybreak Cyber Partner program, and under what conditions. OpenAI is expanding that program at the same time it lowers refusals, which makes the admission process the central control.
For defenders, including the teams that secure data centers, cloud platforms and network infrastructure, the release promises a capable assistant for penetration testing and vulnerability research. The performance claims come from OpenAI’s own evaluation, and the public account does not specify how the vetting works.
The Guardrail Moved From the Model to the Gate
The most revealing figures in the announcement are completion rates, not capability scores. On prompts covering exploit chain development, privilege escalation (turning limited access into administrator control) and authentication bypass (getting past a login), GPT-5.6-Sol completed 1.5%. GPT-5.6-Cyber, built on Sol, completed 95%. The underlying model family is the same. What changed is specialized training and a deliberately lower refusal threshold for dual-use work, meaning tasks that serve a penetration tester and a criminal equally well.
Consumer AI models have long relied on refusal as a safety mechanism: the model declines requests that look dangerous. That approach cannot tell a bank’s red team, hired to attack its own systems, from an intruder asking the same question. OpenAI’s answer is to stop asking the model to make that judgment for this product. GPT-5.6-Cyber is described as intended for “authorized” work, and access runs through the Daybreak Cyber Partner program. In practice, a 95% completion rate means the protection is who gets in, not what the model will say.
That has consequences for everyone involved. Security teams gain a tool that no longer argues with them. OpenAI takes on a gatekeeping role closer to that of a controlled-software vendor than a chatbot provider, which means vetting, monitoring and revoking access. Because the partner program is expanding in the same announcement, the strength of that admission process becomes the key variable in whether the model’s net effect favors defense.
Why Refusals Were a Real Cost for Defenders
OpenAI presents the release as a response to user friction. It said GPT-5.5-Cyber completed only 57.3% of these requests, and that GPT-5.6-Cyber addresses “feedback from security researchers who encountered persistent refusals with the earlier model.” It also said the general-purpose Sol model has a high refusal rate for penetration testing against production systems. Production systems are the live environments where real vulnerabilities, and real consequences, exist.
For a professional tester, a tool that refuses four requests in ten is hard to build a workflow around. Engagements run on tight schedules, and every refusal means rephrasing, switching tools or doing the work by hand. Moving from 57.3% to 95% is the difference between an occasional assistant and one a team can rely on, assuming the output is sound. The security industry has long used offensive tooling for defensive ends, and this release applies that practice to frontier AI.
What a 95% Completion Rate Does and Does Not Measure
A completion rate measures willingness, not correctness. A model can complete an exploit-development request by producing code that does not compile, targets the wrong version or fails against a patched system. The published figures show GPT-5.6-Cyber attempts nearly everything it is asked. They do not show how often the attempts work.
OpenAI also says the model has superior performance in developing arbitrary code execution exploits (attacks that let an intruder run their own commands on a target) and in finding and assessing known vulnerabilities and new zero-days. As reported, those claims come without the benchmark figures, test sets or comparison baselines that would let outside practitioners judge them. The comparative numbers that were published come from OpenAI’s own testing. That is normal for a product launch, but it means the capability case awaits independent evaluation and field results from partner organizations.
What It Means for Infrastructure Operators
Data centers, cloud platforms and network operators are high-value targets, and much of their defense depends on finding weaknesses before someone else does. If GPT-5.6-Cyber performs as described, vetted partners could run more penetration tests and vulnerability searches with the same staff. That could shorten the time between a weakness existing and someone noticing it.
The same speed brings operational pressure. More findings mean more patches to prioritize, test and deploy, often on systems that cannot easily go offline. Operators whose vendors or security providers join the Daybreak program may receive more vulnerability reports, faster, and will need remediation processes that can absorb them. The benefit goes to organizations that can fix quickly, not only to those that can find quickly.
Background
OpenAI, the developer of ChatGPT, trains general-purpose AI models that it has increasingly adapted for specific professional fields. GPT-5.6-Cyber follows an earlier cybersecurity variant, GPT-5.5-Cyber, and is built on the general-purpose GPT-5.6-Sol. General-purpose AI models usually decline requests that resemble hacking, which protects against casual misuse but frustrates security professionals whose job is to attack systems with permission.
The security industry has a long history of defenders using offensive techniques. Penetration testers and red teams are hired to break into an organization’s own systems, and vulnerability researchers look for flaws before criminals or state-backed groups do. Specialized AI models for this work raise the same question the industry has always faced with powerful offensive tools: who gets access, and under what controls. Source: OpenAI Unveils New Cybersecurity Model GPT-5.6-Cyber (SecurityWeek). OpenAI launches a cybersecurity model for authorized work and expands its Daybreak Cyber Partner program.Sources