OpenAI Launches Daybreak Defense Factory and Red Team for Automated Patching and Testing
OpenAI introduced two new cybersecurity products at its 'Cyber at the Frontier' event: Daybreak Defense Factory, which uses AI agents to generate merge requests for patches, and Daybreak Red Team, which automates web application penetration testing.
US-based artificial intelligence company OpenAI officially launched two new products under its Daybreak cybersecurity platform during the 'Cyber at the Frontier' event on November 12. The tools, named Daybreak Defense Factory and Daybreak Red Team, aim to help enterprises accelerate their defense and remediation speeds in response to AI-accelerated attacks. Both services are currently in early trial phases, with no pricing or general availability timeline announced.
Daybreak Defense Factory focuses on automating the patching process. Composed of AI agents built on OpenAI's latest cybersecurity model, GPT-6 Cyber, it scans code, identifies vulnerabilities, and automatically generates fixes. Crucially, these fixes are not deployed directly to production environments; instead, they are submitted to human engineers as 'merge requests' accompanied by validation tests. This design maintains human oversight, ensuring AI-generated patches are confirmed before going live.
Daybreak Red Team specializes in automated red team exercises. The tool uses OpenAI's models to perform continuous scanning and attack path simulation on enterprise web applications. It references source code and application context to investigate potential attack vectors, validates issues reported by other code scanning tools, bug bounty programs, and vulnerability disclosures, and tests the effectiveness of subsequent patches. Nancy Wang, who leads AI applications for cybersecurity at OpenAI, described it as a penetration test at the scale of automated continuous scanning, surpassing human capabilities.
OpenAI President Greg Brockman stated during the event that an enterprise's security level depends on the capabilities of the top-tier models used, requiring cybersecurity practices to be reoriented around what these models can do. He emphasized that while fundamentals remain important, the products themselves are equally critical. For enterprises facing AI-driven threats, the ability to use equivalent-grade tools to shorten the time from vulnerability discovery to remediation is a key metric for evaluating such products.