The new platform pairs GPT-5.5 variants with Codex Security and a roster of enterprise security partners, all aimed at defenders.
OpenAI has unveiled Daybreak, a cybersecurity initiative aimed at finding software vulnerabilities, generating patches, and validating fixes inside enterprise codebases. The launch positions OpenAI directly against Anthropic’s Mythos, which has spent the past few months dominating the conversation about AI-powered defence.
Daybreak rests on three model variants, according to OpenAI. GPT-5.5 covers general-purpose use under standard safeguards. GPT-5.5 with Trusted Access for Cyber is reserved for verified defenders performing tasks such as secure code review, vulnerability triage, malware analysis, and patch validation.
A third model, GPT-5.5-Cyber, is a more permissive variant for authorised red teaming, penetration testing, and controlled validation.
The 💜 of EU tech
The latest rumblings from the EU tech scene, a story from our wise ol’ founder Boris, and some questionable AI art. It’s free, every week, in your inbox. Sign up now!
The platform’s working method begins with threat modelling against a given repository, then identifies and tests vulnerabilities in an isolated environment, and finally proposes and validates fixes.
OpenAI says the goal is to compress security analysis that used to take hours into minutes, with audit-ready evidence handed back into enterprise systems.
Launch partners include Akamai, Cisco, Cloudflare, CrowdStrike, Fortinet, Oracle, Palo Alto Networks, and Zscaler, all of whom are integrating Daybreak capabilities under OpenAI’s Trusted Access for Cyber initiative. Access is being kept tightly controlled at launch; organisations are being asked to request scans or speak to OpenAI sales.
The contrast with Anthropic’s Mythos is becoming the defining shape of the AI cybersecurity race. Mythos has surfaced thousands of zero-day vulnerabilities across major operating systems and browsers, and Anthropic has kept it inside a controlled rollout to roughly a dozen partner organisations under a $100m defensive programme.
Anthropic treats Mythos as a dual-use system whose offensive reasoning is powerful enough to require strict governance. OpenAI’s pitch with Daybreak is narrower and more operational: a defender-first platform built on workflow integration rather than on standalone discovery power.
The timing matters, as yesterday, Google’s Threat Intelligence Group disclosed the first documented case of a criminal threat actor using an AI model to discover and weaponise a zero-day.
The exploit, designed to bypass two-factor authentication on a widely used admin tool, was caught before it could be deployed. GTIG analyst John Hultquist called it “the tip of the iceberg.”
That backdrop sharpens the question Daybreak and Mythos are competing to answer: whether defenders can scale AI as quickly as attackers are starting to.
Daybreak also gives OpenAI an enterprise security story it has lacked. Anthropic’s lead in this segment has been measured in column inches and central-bank briefings as much as in product.
OpenAI’s response is to bring its enterprise relationships, its Codex code-execution tooling, and its full GPT-5.5 family to bear on a problem that, for most chief information security officers, still sits on the wrong side of the resourcing gap.
Whether Daybreak narrows that gap, or simply shifts the spend from one model provider to another, will depend on how the partner integrations land in production. The first signal will be how many of the eight named launch partners have something to show by their next quarterly earnings.
