OpenAI launches Daybreak Red Team and Defense Factory to find and fix software vulnerabilities with AI agents

OpenAI has added two products to its Daybreak cybersecurity line: Daybreak Red Team and Daybreak Defense Factory. They were announced at the company's Cyber at the Frontier event on November 12.

Red Team: agents on the attacker's side

According to SecurityWeek, Daybreak Red Team uses multiple AI agents to identify and investigate potential security weaknesses in web applications, focusing on penetration testing and vulnerability validation. "Agents use source code and app context to investigate attack paths and confirm vulnerabilities," OpenAI says.

The product can examine findings from code scanners, bug bounty submissions and vulnerability disclosure reports. The agents operate in isolated environments, with Guardian review enforcing testing boundaries and controlling which applications and endpoints they can reach.

Defense Factory: patches for review

Daybreak Defense Factory traces vulnerabilities through a codebase and develops patches. It can investigate findings from Daybreak Red Team and other products, import vulnerability data from Wiz, Snyk and Endor Labs, scan connected GitHub repositories, monitor new commits and run scheduled assessments.

Engineers can examine supporting evidence, modify proposed patches using Codex and create draft GitHub pull requests. Patches are not deployed automatically; engineers review and test them before merge.

Availability

OpenAI is accepting requests for early access to Daybreak Red Team. Defense Factory is offered as a preview plugin in ChatGPT for workspaces with Daybreak access.

Sources: SecurityWeek, OpenAI — Daybreak Red Team, OpenAI — Daybreak Defense Factory