OpenAI says its new 'Astra' AI can build attacks without human help

OpenAI disclosed that its newest model, internally named Astra, has crossed the company's own 'Critical' threshold on its cybersecurity capability framework — the first model to do so. According to the summary provided, this means Astra can independently identify previously unknown vulnerabilities (zero-days) in software and hardware, and then develop working exploits against systems that have already been hardened against known attack techniques, without requiring a human operator to guide the process.

OpenAI has published internal risk thresholds for its models for some time, categorizing capabilities across domains like biological, chemical, cyber, and persuasion risk as part of its preparedness framework. Previous generations of models were assessed as falling short of the 'Critical' bar in cybersecurity, meaning they could assist human attackers but not autonomously complete the full vulnerability-discovery-to-exploit chain. Astra's classification marks a step change in the company's own internal risk taxonomy, not a third-party or regulatory assessment.

The disclosure touches multiple constituencies. OpenAI itself faces scrutiny over how it plans to deploy or restrict Astra given the classification, including whether it will be released broadly, gated behind enterprise agreements, or held back from public access. Cybersecurity vendors — companies building AI-assisted defense, vulnerability scanning, and threat detection — stand to benefit from heightened urgency among enterprises and governments to adopt AI-augmented defenses capable of matching AI-augmented offense. Cloud providers hosting AI workloads and enterprises running legacy or hardened infrastructure are the parties most exposed if such a model's capabilities proliferate or are replicated by less careful actors.

The announcement comes from OpenAI itself, based on its own internal safety evaluation framework, so the classification has not been independently verified by outside researchers or regulators at this stage. It remains unclear from the available reporting how OpenAI intends to mitigate the risk in practice — whether through access restrictions, monitoring, or technical safeguards — and what specific evidence (beyond the threshold label) supports the claim of full autonomy in exploit development.

Watch for how OpenAI structures access to Astra, any accompanying safety card or technical report detailing the specific vulnerabilities or systems tested, and reactions from cybersecurity researchers or government bodies that may seek to validate or challenge the 'Critical' designation. Any regulatory response, particularly from bodies focused on AI safety or critical infrastructure protection, would be a key marker of how seriously this disclosure is treated outside OpenAI.