OpenAI launches Daybreak for AI-driven vulnerability detection

OpenAI on Monday launched Daybreak, a cybersecurity initiative that combines the company’s large language models with Codex, its coding-focused system, to help developers and security teams find and fix software vulnerabilities more quickly.

Daybreak is designed to assist with reviewing code, analyzing software dependencies, modeling potential threats, validating patches and investigating unfamiliar systems. Codex can generate and inspect code; when paired with the models, OpenAI says the system can reduce the time between detecting a flaw and deploying a fix.

OpenAI CEO Sam Altman wrote on X that Daybreak is “an effort to accelerate cyber defense and continuously secure software.” He added, “AI is already good and about to get super good at cybersecurity; we’d like to start working with as many companies as possible now to help them continuously secure themselves.”

OpenAI said Daybreak will include verification steps and limits intended to reduce misuse, citing measures such as trust, verification, proportional safeguards and accountability. The company also plans to work with government and industry partners before rolling out more cyber-capable models to the public.

The announcement follows activity by other AI developers offering tools for code inspection and vulnerability discovery. Researchers have reported that advanced models can find software weaknesses that some traditional scanners miss. Security experts and officials have warned the same model capabilities could be used to automate vulnerability research, create malware or develop exploits.

OpenAI described Daybreak as a set of tools aimed at speeding analysis and validation for development and security teams while coordinating with partners to manage risks associated with more capable cyber tools.