OpenAI Expands Cyber Tier

OpenAI said on April 14 it is expanding a gated program for cyber defenders and adding a security-tuned model called GPT-5.4-Cyber. (openai.com) The company said the Trusted Access for Cyber program will scale to “thousands” of verified individual defenders and “hundreds” of teams that protect critical software. It said GPT-5.4-Cyber is a variant of GPT-5.4 fine-tuned to be more permissive for defensive security work. (openai.com) Cyber models can help defenders find bugs, analyze intrusions, and speed up incident response, but the same skills can also be used to exploit systems. OpenAI’s Preparedness Framework lists cybersecurity as a frontier-risk category because stronger models can increase both defense and attack capability. (openai.com) (cdn.openai.com) OpenAI has been moving toward tighter controls as its models get better at security tasks. Its GPT-5.4 system card, published March 5, said GPT-5.4 Thinking was the first general-purpose OpenAI model to ship with mitigations for “High” cybersecurity capability under the company’s framework. (openai.com) The new announcement builds on a program OpenAI first introduced on February 5, when it launched Trusted Access for Cyber alongside GPT-5.3-Codex and committed $10 million in application programming interface credits for cyber defense. OpenAI said then that the goal was to put stronger cyber capability in the hands of trusted defenders while reducing misuse risk. (openai.com 1) (openai.com 2) OpenAI’s developer documentation says GPT-5.3-Codex was the first model it classified as having High Cybersecurity Capability, which triggered extra automated checks in the application programming interface. Separate Codex safety guidance says some affected users could regain access by joining Trusted Access while OpenAI shifted from account-level checks toward request-level checks in most cases. (developers.openai.com 1) (developers.openai.com 2) The company said the latest expansion is meant to prepare for “increasingly more capable models” expected over the next few months. It framed the program as guarded distribution rather than broad release, with identity and trust checks deciding who gets the more capable cyber tools. (openai.com 1) (openai.com 2) The immediate next step is wider rollout to vetted defenders, not a general launch. OpenAI is betting that stronger cyber models can be deployed faster for defense if access stays narrow enough to screen who gets them. (openai.com)