OpenAI introduced Daybreak, a pair of security tools, Help Net Security reports. Daybreak Red Team, in early access, uses coordinated agents to read application source and context, explore attack paths and confirm vulnerabilities. It can validate findings from code scanners, bug bounty reports and disclosure reports, and retest once a patch is ready. OpenAI says runs stay inside defined boundaries with isolated environments and Guardian review controlling what agents can reach.
Defense Factory handles remediation: agents trace a finding through the code and propose a fix, and engineers review and test patches before merging. Teams with access install the Daybreak Defense Factory (Preview) plugin in ChatGPT and connect a GitHub repo. Scans run in Codex cloud, each person needs a personal GitHub connection, and you can watch new commits, schedule scans and review pull requests.
My take
Finding bugs was never the hard part. Fixing them is. An agent that proves the bug and then proves the patch is the right shape. Keep a human on the merge button, though, and scope it tight.
God Bless, and Happy hacking!
