OpenAI Daybreak models combine code analysis with live network intelligence to identify, block and help fix vulnerabilities before exploitation
Cloudflare is bringing AI deeper into vulnerability management with its new Vulnerability Discovery and Remediation service, combining OpenAI Daybreak models with real-time security intelligence from its global network.
Available in early access through Cloudflare Managed Defense, the service is designed to address a persistent enterprise security problem: knowing which vulnerabilities are actually being targeted and responding before attackers can exploit them.
Traditional vulnerability scanners can generate thousands of findings, but often lack the production context needed to distinguish theoretical exposure from active risk. Cloudflare’s approach correlates code-level vulnerability analysis with live Internet traffic, enabling security teams to prioritize weaknesses that are under attack.
The platform can also provide an immediate layer of protection at the edge. Customers can deploy customized WAF rules tailored to specific attack vectors, effectively buying development teams time to address the underlying vulnerability without leaving the application exposed.
“If your security team is manually fighting AI-driven attacks, you’re not just burning them out, you’re losing. We’re shifting the defense strategy toward an automated approach.” — Matthew Prince, Co-founder and CEO, Cloudflare
The third layer is remediation. OpenAI Daybreak models, including GPT-5.6 Cyber, can generate code patches for developer review, potentially reducing the time between vulnerability discovery and remediation. Cloudflare says no generated fix or edge rule is implemented without explicit human approval.
The partnership reflects a broader shift in vulnerability management—from static lists of CVEs toward continuous, context-aware risk assessment. For CIOs and CISOs, the value lies not simply in using AI to find more vulnerabilities, but in connecting discovery, active-threat intelligence, compensating controls and remediation into a single workflow.
McCall McIntyre, Head of Global Cyber Partnerships at OpenAI, said the collaboration aims to put frontier AI capabilities into the hands of enterprise defenders while maintaining human oversight.
The service is currently available by invitation to select Cloudflare Enterprise customers, signalling an emerging model in which AI increasingly becomes an active layer of enterprise cyber defence rather than merely an analytical tool.
