Trends

Frontier cyber capability ships to defenders behind gated access

AI cyber offense and defense · Since May 15

Organizations

OpenAIAnthropicGoogleGoogle DeepMindCorma LabsCrowdStrike

Updates

  1. Oct 9

    Anthropic launched a critical-infrastructure defense program with 11 partners and a free open-source scanner, Mistral opened reduced-moderation cyber access to vetted partners, and OpenAI took down two influence operations.

    Anthropic launches the Cyber MissionMistral Large 4OpenAI disrupts two influence operations

  2. Oct 2

    Gemini 4 Argon went first to vetted cyber defenders, OpenAI launched Codex Security Cloud for repository-wide scanning, and Sonnet 5.5 is the first Sonnet with cyber safeguards.

    Google's Gemini 4 ArgonOpenAI's Codex Security CloudAnthropic's Claude Sonnet 5.5

  3. Sep 4

    OpenAI deployed GPT-6 Astra as its first model at the Critical cyber threshold (100% on ExploitBench), Anthropic restricted Mythos 5.1 to vetted cyber programs, and Google paired a defender-only Gemini 3.8 Flash Cyber with its Fairwind program as OpenAI opened Daybreak for Frontline Defenders.

    OpenAI's GPT-6 AstraAnthropic's Claude Fable 5.1 and Mythos 5.1Google's Gemini 3.8 Flash and Flash CyberGoogle's Fairwind and OpenAI's Daybreak arm defenders

  4. Aug 14

    OpenAI's GPT-5.6-Cyber, gated behind a Daybreak Red tier, completes 95.0% of advanced exploit-development prompts versus 1.5% for GPT-5.6 Sol and has disclosed real zero-days, while Corma Labs raised $60M for a defense-specific security foundation model.

    OpenAI's GPT-5.6-Cyber and Daybreak partner programCorma Labs raises $60M for defensive security AI

  5. Jun 26

    OpenAI's Daybreak shipped the full GPT-5.5-Cyber (85.6% on CyberGym versus 81.8% for GPT-5.5) with a Codex Security plugin that generates patches, a 28-vendor partner program, and the Trail of Bits-founded Patch the Planet initiative.

    OpenAI expands Daybreak with GPT-5.5-Cyber

  6. Jun 5

    Project Glasswing, whose ~50 initial partners surfaced more than 10,000 high- or critical-severity flaws with Claude Mythos Preview, extended to ~150 organizations in power, water, healthcare, and communications; Anthropic's threat study of 832 banned accounts found medium-or-higher-risk actors rising from 33% to 56%.

    Anthropic expands Project GlasswingAnthropic maps a year of AI-enabled cyberattacks

  7. May 15New

    OpenAI built Daybreak on GPT-5.5-Cyber and Codex Security with partners including Cisco, CrowdStrike, Palo Alto Networks, Cloudflare, and Zscaler, and the European Commission opened supervised-access talks with OpenAI and Anthropic after the IMF called AI cyberattacks a systemic financial risk.

    OpenAI's Daybreak cybersecurity platformEU seeks cyber model access from OpenAI, Anthropic

Predictions

  1. Nov 2026

    At least one G7 government proposes or enacts legislation requiring frontier AI cybersecurity tools to be licensed or registered with national-security oversight bodies, analogous to dual-use export controls. May 15

  2. Dec 2026

    A standards body such as MITRE begins formally cataloguing agentic-orchestration attacker techniques, and at least one government moves toward registration or licensing requirements for general-access frontier cyber models. Jun 5

  3. Dec 2026

    Cyber benchmarks such as CyberGym and ExploitGym, plus government trusted-access tiers, become standard release scaffolding for capable models, and automated patch generation becomes the headline defensive product. Jun 26

  4. Feb 2027

    Governed access tiers, hardware-key requirements, and auto-review sandboxing become standard around cyber-capable models, and managed AI-versus-AI defense programs proliferate through systems integrators. Aug 14

  5. Mar 2027

    Development- and deployment-time containment, misalignment monitoring, and trusted-access tiers become standard release gates, and government early-access regimes for covered frontier models formalize around cyber-capable systems. Sep 4

  6. Apr 2027

    Defensive-cyber benchmarks and governed defender-access programs become standard release scaffolding for frontier models over the next two quarters. Oct 2

  7. Apr 2027

    Governed defender-access programs, free vulnerability-scanning services, and routine threat-intelligence disclosure become standard infrastructure around frontier models over the next two quarters. Oct 9