GPT‑6 Cyber vs. GPT-5.5-Cyber

GPT-6 Cyber is a frontier AI cybersecurity model developed by OpenAI to support autonomous vulnerability research, exploit validation, secure software development, and advanced security testing. The model is specifically trained to investigate complex software environments, discover exploitable vulnerabilities, and help security professionals develop effective remediation strategies. Its capabilities include source code analysis, reverse engineering, vulnerability reproduction, exploit development, and investigation of security weaknesses across large software projects. GPT-6 Cyber can conduct extended security research workflows that involve identifying potential attack paths, testing hypotheses, validating technical findings, and producing reproducible evidence for security teams. During OpenAI's research campaigns, the model identified 81 previously unknown high-severity Firefox vulnerabilities and helped develop candidate patches for affected components. It also reproduced 1,724 Linux kernel vulnerabilities and generated working exploits for 948 of them, demonstrating its ability to validate security issues at scale. On the ExploitGym benchmark, GPT-6 Cyber achieved a 48.5% success rate compared with 32.1% for GPT-5.6 Cyber, while achieving 40.3% vulnerability recall in an internal web penetration testing evaluation. The model incorporates specialized alignment training to follow authorized testing scopes, respect security restrictions, and avoid exploiting systems that fall outside the researcher's stated objectives. In OpenAI's ExploitGym Honeypot evaluation, GPT-6 Cyber avoided attacking out-of-scope services in 99.93% of tests without deployment safety instructions and 100% of tests when those instructions were included. Its deployment safeguards include misalignment monitoring, misuse detection, IP allowlisting for API access, human oversight recommendations, and additional protections for operational technology and critical infrastructure systems.

GPT-5.5-Cyber is an advanced AI model designed for authorized cybersecurity professionals who need stronger support for vulnerability research, codebase analysis, and remediation. The model builds on GPT-5.5’s general-purpose intelligence while adding more capable and permissive behavior for specialized defensive security workflows. It is designed to help reduce unnecessary refusals for verified defenders while still pairing advanced capabilities with verification, monitoring, scoped controls, and review. GPT-5.5-Cyber can sustain deeper analysis across large and complex codebases, making it useful for identifying security-relevant components and tracing how vulnerabilities may be reached. It can also help validate likely issues in controlled environments, develop and test patches, and organize evidence for human security teams. The model is intended to support the full remediation loop, helping defenders move from discovery to validation to fix preparation instead of only producing raw vulnerability findings. In benchmark testing, GPT-5.5-Cyber outperformed GPT-5.5 on CyberGym, ExploitGym, and SEC-bench Pro. These results show improved performance in reproducing known vulnerabilities, reasoning through exploitability, and handling long-horizon vulnerability discovery and proof-of-concept workflows. The model is also being evaluated through complex repositories and real remediation workflows as coordinated disclosures conclude. GPT-5.5-Cyber is positioned as a higher-capability option for defenders whose authorized work requires the most advanced cyber support, while GPT-5.5 with Trusted Access for Cyber and Codex Security remains the recommended starting point for most defenders. GPT-5.5-Cyber helps qualified security teams work faster, validate vulnerabilities more effectively, and support safer remediation across critical software systems.