OpenAI has introduced two AI-driven cybersecurity products under its Daybreak program, adding automated testing for web applications and code-level remediation for security findings. The company outlined Daybreak Red Team and Daybreak Defense Factory at its November 12 Cyber at the Frontier event, with access available through its cybersecurity program.
Daybreak Red Team uses a coordinated team of agents to inspect source code and application context, investigate possible attack paths, and confirm vulnerabilities. It can test findings from code scanners, bug bounty submissions, and disclosure reports, then check whether a proposed patch prevents the exploit. OpenAI says assessments run in isolated environments, with Guardian review enforcing the agreed scope and controlling which applications and endpoints the agents can reach. The Daybreak Red Team product page describes the service as an AI penetration-testing system for web applications.
Daybreak Defense Factory handles the remediation side. Its agents trace vulnerabilities through connected code repositories and prepare patches for engineers to review. Developers can examine the supporting evidence, refine a proposed fix with Codex, and test the changes while agents continue working in the background. OpenAI says engineers must review and test proposed patches before they are merged.
The launch extends OpenAI’s broader cybersecurity work, which includes its GPT-6 Cyber model for security research and the Daybreak Blue program for approved defenders. OpenAI’s Defense Factory page says the agents can also scan new commits and run recurring checks as code changes.



