# GPT-5.6-Cyber: Fewer Refusals, Days After Astra Pause

OpenAI shipped GPT-5.6-Cyber days after pausing Astra: a cybersecurity model with fewer refusals that answers 95% of advanced security requests and found 400+ kernel vulnerabilities autonomously.

By Neomanex. Updated 2026-10-07.

OpenAI shipped GPT-5.6-Cyber on August 10 as part of Daybreak Phase Two — a purpose-trained cybersecurity variant of [GPT-5.6 Sol](/models/gpt-5-6-sol) (OpenAI, 2026). This is a frontier model with **fewer refusals, not more**, arriving three days after OpenAI paused its [Astra](/models/astra) model for crossing the Critical cybersecurity threshold under its own Preparedness Framework (OpenAI, 2026). The contradiction is the lead.

## What happened

OpenAI expanded its Daybreak cybersecurity program into two distinct tiers, each serving a different security mission:

**Daybreak Blue** provides access to [GPT-5.6 Sol](/models/gpt-5-6-sol) with its system-level cyber guardrails removed — designed for defensive security work including incident response, malware analysis, patch validation, and vulnerability discovery. This is the tier OpenAI recommends as the starting point for most defenders. GPT-5.6 Sol with Daybreak Blue access responds to 2.0% of advanced cybersecurity requests, adequate for defensive workflows but still heavily refusal-bound.

**Daybreak Red** — where GPT-5.6-Cyber lives — is the offensive tier. Built on GPT-5.6 Sol's architecture but purpose-trained for advanced cybersecurity tasks, GPT-5.6-Cyber responds to 95% of advanced cybersecurity requests — including exploit-chain development, authentication bypass, and privilege escalation — compared to just 1.5% for standard GPT-5.6 Sol (OpenAI, 2026). This is a 63× increase in completion rate (OpenAI, 2026), achieved not by adding safeguards but by removing refusals on dual-use prompts that legitimate security researchers need.

The real-world results back the benchmarks. OpenAI reports GPT-5.6-Cyber has already identified over 400 privilege-escalation vulnerabilities in a popular operating system kernel (OpenAI, 2026), plus at least five vulnerabilities in a mobile OS and three critical vulnerabilities in a database. It also discovered two previously unknown Chrome V8 vulnerabilities that could be chained to corrupt memory and escape the heap sandbox — assigned CVE-2026-15903 after responsible disclosure to Google.

Access is gated: Daybreak Blue is available to vetted organizations including Accenture, IBM, CrowdStrike, Cisco, and Palo Alto Networks. Daybreak Red with GPT-5.6-Cyber is further restricted to trusted customer partners only. There is no public API endpoint.

## Why it matters

The Astra-to-Cyber pivot exposes a deliberate OpenAI strategy: **pause general-purpose dangerous capability, ship purpose-built dangerous capability inside a controlled access program.**

[Astra](/models/astra) was paused because its dangerous capabilities were broad and uncontrolled — it crossed the Critical threshold across multiple domains. GPT-5.6-Cyber ships because its dangerous capabilities are narrow, instrumented, and deployed with specific defensive and offensive objectives inside gated access. Under OpenAI's Preparedness Framework, GPT-5.6-Cyber reached the High cybersecurity threshold but stayed below Critical — the model is more capable than general-purpose alternatives on specific cyber tasks, but not broadly dangerous enough to trigger a pause.

This is the split the industry has been heading toward: general-purpose models get safety-braked; specialized models ship with fewer guardrails and restricted access. Anthropic's Mythos 5 followed the same pattern — the most capable cybersecurity model in the world, restricted to Glasswing partners only (Anthropic, 2026).

The 95% completion rate carries a practical implication: GPT-5.6-Cyber answers nearly every advanced cybersecurity request a defender would make, where GPT-5.6 Sol answers almost none. The effective capability gap between the two models on security work is not incremental — it's categorical.

## What changes for you

**If you run vulnerability management:** GPT-5.6-Cyber's discovery of over 400 kernel privilege-escalation vulnerabilities suggests AI-assisted vulnerability research is production-grade. The model is gated behind Daybreak Red, but the capability class exists and will proliferate — plan for AI-driven vulnerability discovery in your pipeline.

**If you're a security researcher:** The drop from a 97.3% refusal rate to 5% changes what's possible. GPT-5.6-Cyber found two real Chrome V8 CVEs autonomously and discovered privilege-escalation chains across mobile OS, database, and kernel targets. Your toolkit is about to change.

**If you track AI safety policy:** The Astra-Cyber sequence is evidence that OpenAI's Preparedness Framework produces real operational decisions: pause the broad-capability model (Astra, Critical threshold), ship the narrow one (GPT-5.6-Cyber, High threshold). If this pattern holds, the regulatory conversation shifts from "should we pause AI" to "which AI capabilities do we gate, and how."

## FAQ

**Is GPT-5.6-Cyber publicly available?** No. Access is through the Daybreak Red program, restricted to vetted security researchers, critical infrastructure operators, and government partners. There is no public API endpoint or pricing.

**How is this different from GPT-5.5-Cyber?** GPT-5.5-Cyber (released June 2026 under the earlier Trusted Access for Cyber program) achieved 57.3% on the same Advanced Cybersecurity Completion Rate evaluation — GPT-5.6-Cyber more than doubles that at 95% (OpenAI, 2026).

**Does the [Astra](/models/astra) pause affect GPT-5.6-Cyber?** No. Astra was paused because its dangerous capabilities were general-purpose — it crossed the Critical threshold across multiple domains. GPT-5.6-Cyber is purpose-trained for cybersecurity and operates inside the Daybreak access program. The two decisions are deliberately separate.

Canonical: https://neomanex.com/news/gpt-5-6-cyber-daybreak-blue-red