This version of Cyber can perform such tasks as penetration testing, vulnerability identification (and exploitation), and malware reverse engineering, the application implies. It’s intended to be a toolkit to help a company find security holes and test defenses. The fear is that the kit could be misused by the bad guys.

When Anthropic similarly restricted access to Mythos, Altman called the tactic fear-based marketing. Some critics also thought so, saying Anthropic’s rhetoric was overblown. Ironically, an unauthorized group reportedly managed to gain access to Mythos anyway.

OpenAI says it’s working to make Cyber more widely available by consulting with the U.S. government and identifying more users with legit cybersecurity credentials.

A spokesperson tells TechCrunch that the company’s system for verifying those with legit cybersecurity credentials, which it calls Trusted Access for Cyber (TAC) has scaled “to thousands of verified defenders and hundreds of teams responsible for protecting critical software.” Those folks can use the latest model, GPT 5.5 for “cybersecurity tasks” with less “friction” from safeguards.