OpenAI announced two new Daybreak security products on November 12, at its Cyber at the Frontier event, SecurityWeek reported. Daybreak Red Team uses several AI agents to probe web applications for weaknesses. It works from source code and app context, and it can check findings from code scanners, bug bounty reports and vulnerability disclosure reports. Daybreak Defense Factory takes security findings and prepares patches for them.
OpenAI said the Red Team agents run in isolated environments. A review layer called Guardian sets which applications and endpoints they may reach. Defense Factory can take in findings from Red Team and other tools, including Wiz, Snyk and Endor Labs. It can scan connected GitHub repositories, watch new commits and run scheduled checks. Engineers can edit proposed patches with Codex and open draft GitHub pull requests. Patches are not deployed automatically. Red Team is open to early access requests. Defense Factory is a preview plugin in ChatGPT for workspaces that have Daybreak access. The source gives no pricing, no general release date and no test results.
For teams that build or run web software, this adds AI agents to both finding and fixing flaws. OpenAI says a human still reviews and tests each patch before it is merged.