# GPT-6 Cyber: OpenAI gates a Critical-rated cyber model

> GPT-6 Cyber is OpenAI's cyber-specialized GPT-6 Astra variant, rated Critical in cybersecurity and gated behind the Daybreak Red program.

- **Severity:** Info: Research, tools, evals or lab claims with no direct exposure. Context, not an alert.
- **Category:** Lab safety, Benchmark
- **Published by:** OpenAI
- **Disclosed:** 2026-11-05
- **Affects:** GPT-6 Cyber, GPT-6 Astra
- **Research by:** [OpenAI Deployment Safety](https://deploymentsafety.openai.com/)
- **Primary source:** https://deploymentsafety.openai.com/gpt-6-cyber
- **Page:** https://theinjection.dev/items/openai-gpt-6-cyber-system-card/

GPT-6 Cyber is OpenAI's cyber-specialized variant of GPT-6 Astra, which OpenAI classifies as Critical in cybersecurity under its Preparedness Framework and releases only through its vetted Daybreak Red program.

## What happened

OpenAI published the GPT-6 Cyber system card on November 5, 2026, on its Deployment Safety Hub. The card describes the model as a cyber-specialized variant of GPT-6 Astra designed for authorized security work, and states: "Like GPT-6 Astra, we classify GPT-6 Cyber as Critical in Cybersecurity under our Preparedness Framework." OpenAI says three outside parties took part in the evaluations, listed below.

## How it works

Staying inside the authorized scope is the design goal, and OpenAI measures it with a honeypot: a second, out-of-scope target planted in hard ExploitGym problems. Capability and restraint are scored separately, with intended-exploit rates on ExploitGym and a hardened variant on one side, and honeypot exploitation and task refusals on the other. Irregular ran external cyber evaluations using CyScenarioBench, FrontierCyber and Atomic Challenges, and Dragos co-developed a red-teaming evaluation for the industrial control safeguards in a controlled lab.

## Who is affected

Only approved organizations and individuals can call GPT-6 Cyber, because the card says access is restricted through Daybreak Red. Organizations must use SSO, MFA, managed devices and least-privilege access. Individuals must pass identity and liveness checks, show professional suitability and use at least one physical FIDO2 security key, and API IP allowlisting is on by default.

## What to do

Protect and rotate the credentials that can reach this model, which is what OpenAI requires of approved organizations, along with monitoring employee use and reporting suspected misuse. OpenAI says it also monitors for compromised API keys and access tokens on its side, and recommends Codex sandboxing, Auto-Review and human oversight for high-risk workflows.

## Honeypot exploitation, ExploitGym

Lower is better: this is exploitation of an out-of-scope target

| Result | Score |
|---|---|
| **GPT-6 Cyber** (this story) | 0.07% |
| GPT-5.6 Sol | 49.5% |
| GPT-5.6 Cyber | 5.51% |
| GPT-6 Astra | 0% |

Source: https://deploymentsafety.openai.com/gpt-6-cyber

## Intended-exploit success, ExploitGym

Higher means more capable at the authorized task

| Result | Score |
|---|---|
| **GPT-6 Cyber** (this story) | 48.45% |
| GPT-6 Astra | 42.43% |

Source: https://deploymentsafety.openai.com/gpt-6-cyber

## Quick facts

- **Model:** GPT-6 Cyber, a cyber-specialized variant of GPT-6 Astra
- **Preparedness rating:** Critical in cybersecurity, the same as GPT-6 Astra
- **Access:** Restricted through Daybreak Red, after identity and eligibility review
- **ExploitGym Hardened:** 36.94%, against 29.69% for GPT-6 Astra
- **Task completion:** 100% of general security and patching tasks, 96% of exploit development, 97% of red-teaming
- **Outside evaluators:** NIST CAISSI, Irregular and Dragos
- **Published:** November 5, 2026

## Questions

### Can I get access to GPT-6 Cyber?

Access to GPT-6 Cyber is restricted through Daybreak Red, OpenAI's program for cyber-specialized models. OpenAI says approved organizations must use SSO, MFA, managed devices and least-privilege access, while individual applicants must complete identity and liveness checks, show professional suitability and use at least one physical FIDO2 security key. API IP allowlisting is required by default.

### Does GPT-6 Cyber attack targets outside the authorized scope?

GPT-6 Cyber exploited the planted honeypot in 0.07% of graded ExploitGym rollouts, by OpenAI's own measurement, against 49.5% for GPT-5.6 Sol and 5.51% for GPT-5.6 Cyber. GPT-6 Astra scored 0% on the same evaluation. Every one of these figures comes from OpenAI's internal testing, so read them as the lab's claim rather than an independent result.

### How does GPT-6 Cyber compare with GPT-6 Astra at exploiting flaws?

The specialized variant is more accurate, not a new capability tier. GPT-6 Cyber reaches an intended-exploit success rate of 48.45% on ExploitGym against 42.43% for GPT-6 Astra, and 36.94% against 29.69% on the hardened variant. Both models carry the same Critical cybersecurity classification under OpenAI's Preparedness Framework, so the gate is the difference, not the rating.

### Who checked OpenAI's cyber safety claims for GPT-6 Cyber?

OpenAI says it collaborated with NIST's Center for Advancing Innovation and Standards for Super Intelligence on measuring cyber capability, that Irregular ran external cyber evaluations using CyScenarioBench, FrontierCyber and Atomic Challenges, and that Dragos helped evaluate the industrial control safeguards in a controlled lab. OpenAI wrote and published the card, and the numbers in it are OpenAI's.

## Sources

1. [GPT-6 Cyber Card](https://deploymentsafety.openai.com/gpt-6-cyber)
2. [GPT-6 Astra Card](https://deploymentsafety.openai.com/gpt-6-astra)