Red Teaming

Summary: GPT-5.6-Cyber in 30 Seconds GPT-5.6-Cyber is a version of GPT-5.6 Sol trained to be far more permissive on cybersecurity work. Announced on August 10, 2026. It is not publicly available. Only verified security firms and researchers in the Daybreak Red tier can use it. In testing it answered 95% of advanced cyber requests. Standard GPT-5.6 Sol answered just 1.5%. It sits at the High capability level under OpenAI’s Preparedness Framework. The delayed Astra model is the one at the Critical threshold. OpenAI has announced a noticeably less restricted model for cyber defenders: GPT-5.6-Cyber. It is a variant of GPT-5.6 Sol tuned for cybersecurity workflows, and it is closed to ordinary ChatGPT users. ...

TL;DR: GPT-Red in 30 Seconds GPT-Red is an automated red-teaming model OpenAI trained to break its own models; it is not public and never will be. It was trained with self-play: attacker GPT-Red and defender models played against each other, both getting stronger over time. In scenarios where human red-teamers succeeded only 13% of the time, GPT-Red hit 84%. GPT-5.6 was trained against GPT-Red, making it OpenAI’s most robust model against prompt injections (only a 0.05% failure rate). OpenAI just announced something unusual: not a model for users, but an “AI hacker” trained to break its own models. Meet GPT-Red! According to the research publication “Unlocking Self-Improvement for Robustness” released today, GPT-Red automates the work of human security testers (red teams) and does it far better than humans. ...