OpenAI Unveils Daybreak Red Team, Defense Factory Security Tools
OpenAI has unveiled two new Daybreak cybersecurity products that use AI agents to test web applications for vulnerabilities and help security teams develop fixes.
The products, Daybreak Red Team and Daybreak Defense Factory, were announced at OpenAI's Cyber at the Frontier event on November 12. Red Team focuses on penetration testing and vulnerability validation, while Defense Factory investigates security findings and prepares patches.
Red Team capabilities
Daybreak Red Team uses multiple AI agents to identify and investigate potential security weaknesses in web applications. The product can examine findings from code scanners, bug bounty submissions, and vulnerability disclosure reports.
Agents use source code and app context to investigate attack paths and confirm vulnerabilities.
OpenAI states that the agents operate in isolated environments, with Guardian review enforcing testing boundaries and controlling which applications and endpoints they can access.
Defense Factory features
Daybreak Defense Factory is designed to help organizations address vulnerabilities identified by their security tools. It can investigate findings from Daybreak Red Team and other security products, supporting imports from Wiz, Snyk, and Endor Labs.
Agents trace vulnerabilities through your code and develop patches. Engineers review and test proposed patches before merge.
The product can scan connected GitHub repositories, monitor new commits, and perform scheduled security assessments. Engineers can examine supporting evidence, modify proposed patches using Codex, and create draft GitHub pull requests, though patches are not deployed automatically.
Availability
OpenAI is accepting requests for early access to Daybreak Red Team. Defense Factory is offered through a preview plugin in ChatGPT for workspaces with Daybreak access.
Related
