OpenAI designates Astra as first Critical-level cyber model, limits exploit access

OpenAI said on September 1, 2026 that Astra, its forthcoming model, is the first it has designated as meeting the Critical cybersecurity capability threshold under its Preparedness Framework, meaning that with the right tools and access the model can find previously unknown security flaws and develop ways to exploit them across many well-protected systems without a person guiding each step. The company still plans to make Astra available soon, but access to its most advanced cybersecurity capabilities will be more limited than a typical launch.