OpenAI publishes a policy blueprint for empowering cyber defenders

On 21 October 2026 OpenAI published a blueprint for empowering cyber defenders, the second part of its series on democratic governance of frontier AI. It builds on the company's earlier cybersecurity action plan and frontier safety blueprint. OpenAI argues that AI can help defenders find and fix vulnerabilities, detect intrusions and respond to attacks, but that the same abilities can help attackers and create risks when AI systems act beyond their intended limits. It describes the present as a limited window to give defenders advanced AI before advanced offensive cyber capabilities become widely available.

The proposals fall into three areas. The first covers the safety and security of advanced AI: clearer responsibilities for securing frontier models and agents, detecting dangerous behavior and keeping reliable shutdown controls for operations each organization controls. The second is about modernizing cybersecurity, with advanced tools, training and technical support for defenders, fixes for long-standing weaknesses, and investment in essential services and in replacing outdated systems. The third concerns public institutions: stronger government evaluations and independent technical assessments, consistent incident reporting requirements, and better coordinated response and recovery.

OpenAI says its experience with misalignment and security incidents involving its own models shows the need for stronger safeguards and accountability across the industry. It calls on policymakers to act now and to tighten requirements as the technology evolves.