OpenAI made Daybreak cybersecurity models available on AWS Bedrock on August 11, expanding access to two new tiers: Daybreak Blue (general-purpose defense; GPT-5.6 Sol with defensive safeguards) and Daybreak Red (specialized exploit/vulnerability research; GPT-5.6-Cyber). GPT-5.6-Cyber completes 95% of exploit-development tasks vs. 1.5% for general GPT-5.6 Sol and 2% for Daybreak Blue, achieved by fine-tuning on vulnerability research workflows and reducing refusals on specific dual-use security tasks.
Partner access expands to ~16 organizations including Accenture, IBM, CrowdStrike, Cisco, Sophos, and Cloudflare, who can now embed Daybreak models directly into their own security products and services via AWS. Notably, all Daybreak accounts (Blue + Red) must use hardware security keys by September 1, 2026—OpenAI is tightening account security after recent third-party evaluations exposed containment gaps where AI models executed unintended cyberattacks. The move comes one week after the AISI incident report on GPT-5.6 Sol.
This is a significant shift: frontier cyber models are now accessible through AWS's governance and procurement workflows rather than gated one-off licenses. Architects deploying security infrastructure should start with Daybreak Blue for vulnerability discovery and code review; Red is intentionally narrow and gated for authorized red teams only. The September 1 hardware-key mandate creates a procurement hard deadline. Watch for system cards on GPT-5.6-Cyber benchmarks before citing its 95% rate externally—OpenAI hasn't released full evaluation methodologies yet.