OpenAI's Daybreak Takes Aim at Anthropic's Glasswing in the AI Cybersecurity Arms Race

Anthropic got a one-month head start. OpenAI wants to close the gap in a single move. Daybreak, announced May 11, is the company's full-stack cybersecurity platform built on GPT-5.5 and Codex Security.

Daybreak vs. Project Glasswing: OpenAI fires back

The backstory matters here. In April, Anthropic dropped Project Glasswing, powered by Claude Mythos Preview. That model autonomously found thousands of zero-day vulnerabilities across every major OS and browser. Apple, Microsoft, Google, and Amazon signed on almost immediately.

OpenAI's counter-move takes a different angle. Where Anthropic restricts Mythos to roughly 50 handpicked organizations, Daybreak aims for much broader reach. Sam Altman said he wants to work with "as many companies as possible" to keep their software continuously secure.

Three GPT-5.5 tiers for cybersecurity

Daybreak runs on a tiered model system. Standard GPT-5.5 handles general security tasks. GPT-5.5 with Trusted Access for Cyber covers verified defensive workflows like vulnerability triage and malware analysis. GPT-5.5-Cyber goes further with red teaming and penetration testing for authorized teams only.

OpenAI points to its predecessor, GPT-5.4-Cyber, which contributed to fixing over 3,000 critical vulnerabilities since its April launch. Daybreak wraps that raw capability into an enterprise platform with threat modeling, patch validation, and dependency analysis driven by Codex Security.

Daybreak's partner list packs serious weight

Cloudflare, Cisco, CrowdStrike, Palo Alto Networks, Oracle, Akamai, and Fortinet are all on board. The roster only partially overlaps with Glasswing's coalition, which could push large enterprises to run both programs side by side. Competition among your cybersecurity AI providers? That's actually a good problem to have.

Pricing remains undisclosed. Organizations must request a vulnerability assessment from OpenAI directly. Meanwhile, Anthropic committed up to $100 million in usage credits to Glasswing participants, a concrete incentive that Daybreak hasn't matched yet.

The real race: who patches fastest

Beyond the corporate rivalry, the stakes are existential for the software industry. When AI can turn a patch diff into a working exploit in half an hour, the old 90-day disclosure window feels like a relic. The winner here won't be whoever finds the most bugs. The winner will be whoever helps defenders fix them first.