OpenAI Puts Its Offensive Cyber Model on Amazon Bedrock Behind a Vetting Program

OpenAI and Amazon Web Services (AWS) made two security-specific models available to eligible customers on Amazon Bedrock, split into two tiers. Daybreak Blue serves GPT-5.6 Sol, with safeguards recalibrated for defensive work such as detection engineering, incident response and patch validation. Daybreak Red serves GPT-5.6-Cyber, trained specifically for vulnerability research and exploit development.

The gap in capability between the two tiers is the point of the product. OpenAI's own documentation, as reported by AWS, puts completion at 95.0% for requests involving exploit-chain development, authentication bypass and privilege escalation under Daybreak Red, against 2.0% for the general model under Daybreak Blue. That figure measures compliance rather than success, so it describes what the model agrees to attempt, not what it can actually breach.

OpenAI says GPT-5.6-Cyber found two previously unknown vulnerabilities in Google Chrome's V8 JavaScript engine that could be chained together, and that Google has since patched them. That claim comes from the vendor and has not been independently reproduced.

Access runs through OpenAI's Trusted Access for Cyber program, which requires identity verification, monitoring and use-case restrictions. Russian-language coverage of the launch described the tiers in blunt terms, as models with the usual safety filters removed for security professionals.