# penetration testing

OpenAI announced a partnership with the security firm Hacktron in which engineers from both organizations and Hacktron's security researchers jointly pick high-priority areas to test, focusing on how OpenAI's systems interact with third-party services. OpenAI came to know Hacktron through its Security Bug Bounty program; the team builds AI agents for code review, penetration testing and red teaming, and its research has uncovered vulnerabilities in how applications, cloud infrastructure and identity systems interact. As part of the partnership, OpenAI is expanding Hacktron's access to its frontier models through Daybreak Red.

OpenAI announced a partnership with the security firm Hacktron in which engineers from both organizations and Hacktron's security researchers jointly pick high-priority areas to test, focusing on how OpenAI's systems interact with third-party services. OpenAI came to know Hacktron through its Security Bug Bounty program; the team builds AI agents for code review, penetration testing and red teaming, and its research has uncovered vulnerabilities in how applications, cloud infrastructure and identity systems interact. As part of the partnership, OpenAI is expanding Hacktron's access to its frontier models through Daybreak Red.

OpenAI released GPT‑6 Cyber for security research, scoring 48.5% on ExploitGym, which tests whether a model can exploit a specified vulnerability, up from 32.1% for GPT‑5.6 Cyber. In a separate alignment evaluation, the model avoided exploiting out-of-scope services in 99.93% of tests without its deployment prompt, versus 94.49% for GPT‑5.6 Cyber, and reached 100% with the prompt. OpenAI says it has been used to develop 948 privilege escalation exploits in Linux and to find 81 previously unknown high-severity vulnerabilities in Firefox.

OpenAI released GPT‑6 Cyber for security research, scoring 48.5% on ExploitGym, which tests whether a model can exploit a specified vulnerability, up from 32.1% for GPT‑5.6 Cyber. In a separate alignment evaluation, the model avoided exploiting out-of-scope services in 99.93% of tests without its deployment prompt, versus 94.49% for GPT‑5.6 Cyber, and reached 100% with the prompt. OpenAI says it has been used to develop 948 privilege escalation exploits in Linux and to find 81 previously unknown high-severity vulnerabilities in Firefox.