# GPT-6 Cyber

GPT-6 Cyber is an AI model released by OpenAI on Nov 5 2026. It has a 1.05M context window. Tracked results include 48.5% on ExploitGym (remote target), 36.94% on ExploitGym Hardened and 95% on RemoteExploitBench.

## Facts

| Field | Value |
| --- | --- |
| Model | GPT-6 Cyber |
| Developer | OpenAI |
| Release date | Thursday, Nov 5 2026 |
| Licensing | Closed |
| Context window | 1.05M |

## API pricing

All rates in USD per 1,000,000 tokens, pay-as-you-go.

| Tier | Input | Cached input | Cache write | Output |
| --- | --- | --- | --- | --- |
| Up to 272K input tokens | $20.00 | $2.00 | $25.00 | $100.00 |

Daybreak Red approval is required. These are the published standard short-context prices.
Short-context cache writes are $25 per million tokens for 30 minutes, stored here, or $50 per million tokens for 12 hours.
The pricing table leaves every long-context column blank, so no long-context rate is recorded.
Verified November 5, 2026 against the first-party source: https://developers.openai.com/api/docs/pricing

## Tracked benchmark scores

| Benchmark | Score | Source | What it measures |
| --- | --- | --- | --- |
| ExploitGym (remote target) | 48.5% | Lab | Can the model exploit a vulnerability it was told about, on a remote target, and show that it used that vulnerability? OpenAI reported this as a percentage at the GPT-6 Cyber launch. It is a different measurement from the timed ExploitGym pass rates and from the count of solved instances. Higher is better. |
| ExploitGym Hardened | 36.94% | Lab | The same kind of intended-exploit test as ExploitGym on a remote target, with stronger defenses turned on, such as address randomization, stack canaries, the V8 sandbox, and stricter kernel settings. Higher is better. |
| RemoteExploitBench | 95% | Lab | Can the model finish an exploit against a known vulnerability in a real application — such as GitLab, PostgreSQL, or Jenkins — running as a remote target in a controlled lab? The score is the share of tasks completed. Higher is better. |
| ExploitGym Honeypot (without deployment prompt) | 99.93% | Lab | The model is given a hard exploitation task and an easy out-of-scope service it could attack instead. This score is how often it leaves that service alone when no deployment safety prompt is added. Higher is better. |
| ExploitGym Honeypot (with deployment prompt) | 100% | Lab | The same honeypot test, with the deployment safety prompt included. The score is how often the model leaves the out-of-scope service alone. Higher is better. |

## About GPT-6 Cyber

GPT-6 Cyber was announced on November 5, 2026 as a cybersecurity model trained to find and validate exploitable vulnerabilities while staying inside the scope a researcher sets. OpenAI offered it first through the API and Codex to a select group of approved Daybreak Red customers, and said access would widen to all Daybreak Red customers. The same announcement said GPT-5.6 Cyber was being made available to every Daybreak Red customer. OpenAI rated GPT-6 Cyber Critical for cybersecurity under its Preparedness Framework, up from High for GPT-5.6 Cyber, and said it outperformed GPT-6 Astra on most cyber tasks. The system card also carried forward High, not Critical, for biological and chemical capabilities, and below High for AI self-improvement.

At release, OpenAI reported 48.5% on ExploitGym, the share of tasks that exploited a specified vulnerability in a remote target, against 32.1% for GPT-5.6 Cyber. The system card states that result as a 48.45% intended-exploit success rate, and 36.94% on a hardened ExploitGym variant with stronger mitigations. On RemoteExploitBench, GPT-6 Cyber completed 95% of tasks; the launch post said GPT-6 Astra running with Daybreak Blue refused every task. A separate, unnamed web penetration test without source code recorded 40.3% vulnerability recall, against 32.0% for GPT-6 Astra. On ExploitGym Honeypot, GPT-6 Cyber stayed in scope in 99.93% of tests without a deployment prompt and 100% with one, compared with 94.49% for GPT-5.6 Cyber without the prompt. OpenAI also said the model had identified 81 previously unknown high-severity Firefox vulnerabilities and developed working exploits for 948 Linux kernel vulnerabilities. The API documentation listed a 1,050,000-token context window, text and image inputs, and text output. For approved organizations, short-context rates were $20 per million input tokens and $100 per million output tokens; long-context rates were not published.

## Questions and answers

### When was GPT-6 Cyber released?

GPT-6 Cyber was released by OpenAI on Thursday, Nov 5 2026.

### Who made GPT-6 Cyber?

GPT-6 Cyber was built by OpenAI. Creators of ChatGPT and the GPT series of models. Pioneered large-scale language model research.

### How much does GPT-6 Cyber cost?

GPT-6 Cyber costs $20.00 per million input tokens and $100.00 per million output tokens through the OpenAI API. Cached input is $2.00 per million tokens. Rates are pay-as-you-go API prices verified against OpenAI's published pricing on November 5, 2026.

### What benchmark scores did GPT-6 Cyber get?

GPT-6 Cyber reports 5 tracked benchmark scores — ExploitGym (remote target): 48.5%; ExploitGym Hardened: 36.94%; RemoteExploitBench: 95%; ExploitGym Honeypot (without deployment prompt): 99.93%; ExploitGym Honeypot (with deployment prompt): 100%. Tracked scores may come from lab reports or independent benchmarks; source details accompany the benchmark data. It holds the best score among all models tracked here on ExploitGym (remote target), ExploitGym Hardened, RemoteExploitBench, ExploitGym Honeypot (without deployment prompt) and ExploitGym Honeypot (with deployment prompt).

### What is the context window of GPT-6 Cyber?

GPT-6 Cyber has a context window of 1.05M. Providers may specify separate input and output token limits.

### Is GPT-6 Cyber open source?

No. GPT-6 Cyber is a closed model. The weights are not published — it is available only through the provider's own API, apps, or partner platforms.

### What came before and after GPT-6 Cyber?

OpenAI's previous tracked release was GPT-6.1 Terra on Oct 26 2026, 10 days earlier. It is the most recent OpenAI model tracked on AI Release Tracker.


---

Canonical page: https://aireleasetracker.com/model/openai/gpt-6-cyber
Site index: https://aireleasetracker.com/llms.txt
Source: AI Release Tracker (https://aireleasetracker.com). Most benchmark scores come from lab launch material; gathered results identify the leaderboard that published them.
