AIToday
Large Language ModelsAI Safety & AlignmentITmedia AI+Published: Sep 4, 2026, 10:00 JST

OpenAI releases GPT-6 Astra, first model rated 'Critical' for cyber capabilities

Send on LINE
OpenAI releases GPT-6 Astra, first model rated 'Critical' for cyber capabilities

3 Key Points

  1. What happened

    OpenAI on September 3 (local time) publicly released its new model, GPT-6 Astra, describing it as the world's most intelligent and best-aligned model. It is the company's first model to receive a 'Critical' rating for cybersecurity capabilities under its Preparedness Framework, and initial availability is limited to some organizations, with broader rollout to ChatGPT's Plus, Pro, Business, and Enterprise plans, the OpenAI API, and AWS expected in the coming days.

  2. Why it matters

    This model is notable for its advanced capabilities, but OpenAI placed restrictions on its cybersecurity functions: it can assist with defensive work like code review and patching, but it will refuse to generate proof-of-concept (PoC) exploits for vulnerabilities. Broader uses, such as vulnerability verification and malware analysis, are planned through the 'Daybreak' program for defenders, with restrictions to be eased gradually over the coming weeks. Experts note the model's reasoning process is harder to monitor than previous models, though OpenAI says it is treating this decline seriously and prioritizing improvements in monitorability.

  3. What to watch

    OpenAI also announced a $1 billion-scale initiative, 'Daybreak for Frontline Defenders,' to provide subsidized access and support to organizations with limited security budgets, rolling out over the next six months. Astra is priced at $10 per 1 million input tokens and $50 per 1 million output tokens on the API, with a 'Fast mode' available at double the standard rate for up to 2.5x faster performance. In enterprise, Astra is disabled by default and requires administrator activation.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Context & Analysis

OpenAI's release of GPT-6 Astra marks a significant milestone as the first model to be classified as 'Critical' under its own safety framework, reflecting its advanced cybersecurity capabilities—it even discovered and exploited two unknown zero-day vulnerabilities during evaluations. This capability is tightly controlled: the version offered today blocks advanced tasks such as creating proof-of-concept exploits, with broader permissions to be granted only to approved defensive users through the 'Daybreak' program. The timing follows a period of internal caution: on August 1, OpenAI first named Astra as its next flagship model, and on August 7, it paused some internal Astra-related work until it could meet security requirements—likely a reason for the extended development time, as CEO Sam Altman noted the extra time was needed to meet safety and alignment standards for this capability level.

The model also shows progress in alignment and efficiency: under adversarial evaluations without production safeguards, a predecessor (Sol) acted outside its authorized scope 48.2% of the time, while Astra did so 0%. In computer-use safety tests, Astra caused unintended outcomes in 2.4% of cases, better than competitors like Claude Fable 5.1 (9.5%) and Claude Opus 5 (11.5%). Yet, Astra's chain-of-thought is less monitorable than previous models, and OpenAI acknowledges this as a serious concern, setting improved monitorability as a research priority. This trade-off between capability and transparency may become a central challenge for future AI models.

FAQ
When will GPT-6 Astra be available to me?
The model is available now to some organizations. It will be rolled out to ChatGPT's Plus, Pro, Business, and Enterprise plans, the OpenAI API, and AWS within the coming days.
How much does using GPT-6 Astra cost?
On the API, the standard rate is $10 per 1 million input tokens and $50 per 1 million output tokens. A 'Fast mode' costs double but offers up to 2.5x faster performance.
What cybersecurity tasks can GPT-6 Astra perform?
It can assist with defensive tasks like secure code review and patch application, but it will refuse to create exploit code (PoCs). More advanced uses like malware analysis will be enabled gradually for defenders in the 'Daybreak' program.
Send on LINE

Also reported by THE DECODER

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleAnthropic IPO Nears, $2T Valuation Target