[DigitalToday reporter Chi-gyu Hwang] OpenAI has unveiled two security products that use AI agents to find software vulnerabilities and produce fixes.

On Nov. 13 local time, Security Boulevard reported that OpenAI showcased "Daybreak Red Team" and "Daybreak Defense Factory" at its "Cyber at the Frontier" event.

Daybreak Red Team and Daybreak Defense Factory are included in OpenAI's Daybreak security platform and support corporate security teams by automating a large part of the work of finding and fixing vulnerabilities.

OpenAI President Greg Brockman (그렉 브록먼) said advanced AI models will play a key role in protecting corporate networks. He stressed that existing security approaches remain important, but companies should build their defenses around advanced AI capabilities.

Daybreak Red Team is a product for simulated hacking. Multiple AI agents analyse application code and investigate potential security breaches. Conventional vulnerability scanners flag possible problems, but Daybreak Red Team also checks whether suspected vulnerabilities can actually be used in attacks.

The red team also reviews bug bounty submissions, vulnerability disclosure reports and alerts from code-scanning tools. When developers fix a vulnerability, it tests again to verify the fix was done properly. The agents operate in an isolated environment and are restricted to approved apps and access points through a review device called "Guardian". OpenAI is currently accepting applications for early access to the red team.

Defense Factory turns identified vulnerabilities into actual security patches. Based on OpenAI's "GPT-6 Cyber" model, agents examine code repositories and propose code changes. It can connect to GitHub repositories to monitor newly uploaded code and can also set up regular inspection schedules. It can also import vulnerability data from existing security firms including Snyk, Endor Labs and Wiz.

Developers have final authority over changes. They can review the evidence for a vulnerability and use OpenAI Codex to refine a fix and create a draft GitHub pull request. A pull request is a procedure in which a developer asks for a modified version to be merged into the original code after fixing it.

A patch is deployed only after a person reviews and approves it. Defense Factory is offered as an added feature in ChatGPT, and companies using Daybreak can try it in advance.