OpenAI Launches Two AI Cybersecurity Tools to Automate Penetration Testing and Vulnerability Remediation

OpenAI has introduced Daybreak Red Team and Daybreak Defense Factory, two AI cybersecurity tools designed to help organizations test web applications, confirm security flaws, and prepare fixes.

Announced on November 12, 2026, the products expand its Daybreak platform, linking automated penetration testing with vulnerability remediation while keeping engineers responsible for approving code changes.

The launch formed part of OpenAI’s Cyber at the Frontier event. Both tools target a common security problem. Finding a possible weakness is only the beginning. Teams must determine whether attackers can exploit it, understand its impact, and verify that a proposed patch actually removes the risk.

Daybreak Red Team, now available in early access, uses OpenAI models to examine web applications for vulnerabilities. Nancy Wang, who leads cyber-applied AI at OpenAI, described a service that combines continuous scanning with agents that investigate source code, application context, and possible attack paths.

Rather than stopping at a scanner warning, the tool aims to test whether a reported issue presents a real security risk. It can also examine findings submitted through code scanners, bug bounty programs, and vulnerability disclosure reports, then test patches intended to address those weaknesses.

OpenAI’s security workflow links vulnerability discovery with practical testing, checking whether flaws are reachable and exploitable in real applications before prioritizing repairs.

OpenAI Launches Two AI Cybersecurity Tools

Daybreak Defense Factory focuses on finding, validating, and fixing vulnerabilities across codebases. Its agents use OpenAI’s cyber models, including GPT-6 Cyber, to investigate potential flaws and develop proposed patches. Engineers review and approve those changes before they enter production.

According to Wang, engineers receive a merge-ready pull request containing the patch and a test showing that the fix works. That makes the output more useful than a standalone alert, giving developers both a suggested repair and evidence they can assess during code review.

Red Team identifies application weaknesses and attack paths, while Defense Factory converts confirmed findings into proposed code fixes, helping security researchers and developers resolve vulnerabilities faster.

The announcement follows earlier work covered in Cybersecurity News’ report on OpenAI Codex Security, which described an agent that builds project-specific security context, validates findings in isolated environments, and generates patches for review.

It also extends the approach behind Codex Security Cloud, an always-on service that monitors repositories and incoming commits. That service investigates potential vulnerabilities, removes duplicate findings, and prepares fixes, showing how OpenAI is moving toward continuous security checks within development workflows.

Human approval remains a clear boundary in the new launch. Defense Factory prepares changes rather than deploying them independently, and Red Team’s early-access status limits immediate availability.

The practical value will depend on whether teams receive reliable evidence, useful patches, and fewer findings that require lengthy manual investigation.

OpenAI is positioning these products to complete that workflow, not simply increase the number of vulnerabilities reported. Its cybersecurity platform overview describes the same discovery-to-verification process for approved defenders working within existing security and development workflows.

Give your SOC the alert context on the latest threats to stop incidents quickly -> Integrate Threat Intel from 16K SOCs

The post OpenAI Launches Two AI Cybersecurity Tools to Automate Penetration Testing and Vulnerability Remediation appeared first on Cyber Security News.