Cloudflare opens early access to OpenAI-powered service that finds and blocks code flaws

Cloudflare first takes a snapshot from its Web Assets inventory and web application firewall showing which routes are live and what security events they have thrown off. A reconnaissance agent maps request paths to sections of the codebase, and hunter agents work from that map. Code running on Cloudflare Workers is pulled in through Workers Observability. Every finding is validated before it receives a risk rating, which moves up if production evidence shows heavy traffic or active probing against the affected route.

The service produces two kinds of fixes. Custom firewall rules, scoped to the method, path and request details needed to reach the vulnerable code, can be deployed as a stopgap while developers work. The models also draft code patches for engineers to review. Cloudflare said neither rules nor patches take effect without explicit human approval, and the models cannot apply them on their own.

Prompts travel through Cloudflare AI Gateway to OpenAI servers, and no inference runs on Cloudflare's own edge. Redaction strips out context the model does not need. Every proposal must pass checks written outside the model, and an unsuccessful check stops the workflow before a customer sees anything.

Cloudflare cited the scale of the problem: the National Vulnerability Database recorded 60,475 vulnerabilities by September, compared with 48,185 for all of 2025. Scanners hand teams thousands of findings without showing which matter in production, and the service is meant to close that gap. Cloudflare is moving away from what co-founder and Chief Executive Matthew Prince called chasing patches "one vulnerability at a time." Teams fighting AI-driven attacks by hand are losing, in his view; a network that reads internet traffic in real time, paired with GPT-5.6-Cyber, lets defenders stop attacks before they land.

GPT-5.6-Cyber arrived in August, when OpenAI split Daybreak into two access tiers and placed the model behind the higher tier, Daybreak Red, for vulnerability research and exploit validation. OpenAI said the model completed 95% of advanced cybersecurity requests on its own benchmark, against 1.5% for the general-purpose GPT-5.6 Sol. McCall McIntyre, OpenAI's head of global cyber partnerships, said the network is meant to give defenders the advantage of frontier AI "safely."

Palo Alto Networks used the same models inside its Unit 42 consulting engagements last month, according to the report. Proofpoint also announced on the same day that Daybreak models now sit behind a SOC Analyst Agent for threat investigation. Separately, OpenAI committed $1 billion to subsidized Daybreak access for water and electricity utilities, local government, community banks and nonprofits.

Access to Vulnerability Discovery and Remediation is by invitation only. Cloudflare is limiting the early phase to selected enterprise customers, and each engagement starts with one application the customer nominates. The company did not disclose pricing or give a timeline for moving the service beyond early access.