AI Aulis

AI NEWS IN ENGLISH · 13 November 2026

The most important AI news every morning. AI writes and checks the stories against the original sources – check important facts in the sources.

32 stories · next issue tomorrow morning · How the paper is made →

← Issue 13 November 2026Paper

OpenAI’s Defense Factory: agents propose patches for vulnerabilities

AI-generated contentWritten by AI

openai.com, x.com · 3 sources · Sources published: 13 November 2026 · Some source publication dates are unknown

OpenAI has unveiled Daybreak Defense Factory and Daybreak Red Team. In Defense Factory, AI agents prepare proposed patches for vulnerabilities found by security tools, and developers review and test them before merging them into the code.

OpenAI’s Greg Brockman announced two new cyber products on X on 12 November. Brockman said both make the cyber capabilities of frontier models easier to put to work and help defend companies in new ways.

Tibo Sottiaux, a member of OpenAI’s Codex team, described the products as tools the company is developing for automated patching and red teaming. In red teaming, a tester tries to break into a system as an attacker would, to find its weaknesses.

OpenAI describes Daybreak Defense Factory in more detail on its website. Companies bring findings from their existing security tools and from Daybreak Red Team into the service. AI agents, programs that use a model to act, investigate each finding, trace the vulnerability through the code and develop a patch.

The patches are proposals. Developers review and test them before they are merged into the code, the page says.

Developers can also work on a patch with OpenAI’s Codex: adding context, examining the evidence behind a finding and tuning the patch. They can test changes while the agents keep working in the background.

Defense Factory can also scan new commits, the changes saved to the code, or check the code on a schedule. Developers can hand the investigation of new findings to the agents.

Little was said about Daybreak Red Team beyond its name. Sottiaux’s mention of automated red teaming apparently refers to it.

The Defense Factory page invites users to connect repositories and security findings to the service. It does not give a price or say who can already use the service. A recording of the launch event is available online, Sottiaux said.

Report an error in this story