OpenAI launched Daybreak on Monday, a cybersecurity initiative that combines its GPT-5.5 model family with Codex as an agentic harness to automate vulnerability discovery, threat modeling, and patch validation across enterprise codebases. The platform positions OpenAI as a direct competitor to Anthropic’s Project Glasswing, which uses the Claude Mythos model for cyber defense and has already been adopted by Apple, Microsoft, Google, and Amazon.

What Daybreak Does

Daybreak is built around a specific workflow: Codex Security scans a codebase, builds an editable threat model from the repository, then automates monitoring for higher-risk vulnerabilities. Issues flagged by the scan can be investigated in an isolated environment. The system generates and tests patches, then sends results with audit-ready evidence back to the client’s systems.

“AI can now help defenders reason across codebases, identify subtle vulnerabilities, validate fixes, analyze unfamiliar systems, and move from discovery to remediation faster,” OpenAI wrote in the announcement. “Because those same capabilities can be misused, Daybreak pairs expanded defensive capability with trust, verification, proportional safeguards, and accountability.”

CEO Sam Altman framed the initiative as a proactive play. “AI is already good and about to get super good at cybersecurity; we’d like to start working with as many companies as possible now to help them continuously secure themselves,” he wrote on X.

Three-Tier Model Access

Daybreak operates across three model tiers, according to MacRumors:

  • GPT-5.5 with standard safeguards for general-purpose use
  • GPT-5.5 with Trusted Access for Cyber for verified defensive work, covering secure code review, vulnerability triage, malware analysis, detection engineering, and patch validation
  • GPT-5.5-Cyber for specialized authorized workflows including red teaming, penetration testing, and controlled validation, with stronger verification and account-level controls

The tiered access structure mirrors OpenAI’s earlier GPT-5.4-Cyber rollout in April, which the company says has contributed to fixing more than 3,000 vulnerabilities, according to MacRumors.

Enterprise Partners and Competitive Context

Launch partners include Cloudflare, Cisco, CrowdStrike, Palo Alto Networks, Oracle, and Akamai, according to Engadget. Companies can request a Daybreak assessment from OpenAI, which includes a vulnerability scan. Pricing has not been disclosed.

The timing is deliberate. Anthropic released its specialized cybersecurity model Mythos in April, and Project Glasswing has gained traction quickly. Mozilla revealed that Mythos helped it find and patch 271 vulnerabilities in the latest Firefox release, according to Engadget. That adoption momentum gives Daybreak a clear benchmark to beat.

The launch also follows OpenAI’s separate move this week to grant European Commission and EU institutions preview access to GPT-5.5-Cyber under a new EU Cyber Action Plan, a regulatory cooperation step that Anthropic has not matched for Mythos.

The Cyber Agent Market Takes Shape

Daybreak marks the first time OpenAI has packaged its models into a named, product-level cybersecurity offering with dedicated enterprise partnerships. The cyber defense market for AI agents is now a two-horse race between OpenAI and Anthropic, with Google’s own cybersecurity AI efforts running in parallel. For security teams evaluating these tools, the question is no longer whether AI agents will handle vulnerability management, but which vendor’s agent framework they will build around.