OpenAI has designated its upcoming Astra model as the first system that may reach the Critical threshold for cybersecurity capabilities under the companys Preparedness Framework. The move marks a major step in applying the framework in practice and comes with a suite of strengthened safeguards now in effect.
Internal evaluations completed over recent days revealed significant advancements in agentic coding and cybersecurity performance. Combined with expert assessments these results led the company to conclude that Critical level capabilities cannot be ruled out at this time. Prior frontier models including GPT 5.6 Sol were assessed only at the High threshold.
Under the Preparedness Framework a model reaches the Critical cybersecurity threshold when it can identify and develop functional zero day exploits of all severity levels across many hardened real world critical systems without human intervention. It also qualifies if it can devise and execute end to end novel strategies for cyberattacks against hardened targets when given only a high level desired goal.
OpenAI stated that full benchmarking continues yet the preliminary findings were strong enough to trigger immediate action. The company has paused all internal Astra related activities that do not yet satisfy the elevated security requirements. Development has shifted into isolated testing environments featuring restricted network and tool access enhanced model weight protections and encryption additional monitoring and detection capabilities and sandboxed execution.
Universal monitoring now covers every agentic application of the model including training and evaluation runs. Safety systems are configured to detect and halt high risk actions in real time. OpenAI is also engaging government agencies and selected AI safety organizations to conduct further independent testing of the models capabilities.
The company emphasized transparency with the public and the broader safety and security communities. Astra remains unreleased and the firm clarified that the model played no role in any recent external incidents. OpenAI expressed its intention to eventually place Astras advanced capabilities in the hands of defenders while ensuring development proceeds only under the stricter controls required by the Critical designation.
This activation of the Preparedness Framework demonstrates how OpenAI plans to manage the dual use nature of rapidly advancing AI systems that can both fortify cyber defenses and potentially enable sophisticated attacks at greater speed and scale.