OpenAI's New Astra Model Reaches 'Critical' Cybersecurity Capability Threshold, Prompting Strict Safeguards

OpenAI has announced that its upcoming artificial intelligence model, named Astra, has reached the 'Critical' cybersecurity capability threshold under the company's internal Preparedness Framework. This marks the first time an AI model has been assigned this highest hazard classification. The determination was made after extensive automated and expert-driven evaluations demonstrated Astra's ability to independently discover zero-day software vulnerabilities and execute complex exploit chains across hardened real-world systems without step-by-step human intervention. During rigorous safety testing, Astra achieved a perfect 100 percent score on ExploitBench, an industry benchmark that measures an AI model's capability to generate working exploits from known software flaws. Furthermore, when evaluated on newly disclosed vulnerabilities, Astra autonomously uncovered two previously unknown zero-day bugs in a web browser engine and chained multiple system flaws to gain root-level administrative access. Because of these unprecedented autonomous cyber capabilities, OpenAI delayed portions of Astra's development to implement stringent safeguards. These include specialized misalignment monitors designed to detect and block malicious hacking queries or unauthorized model actions. To prevent potential misuse against critical national infrastructure, energy grids, and public utilities, OpenAI plans a controlled rollout. When Astra is released to the general public, its advanced offensive cybersecurity functions will remain restricted, while vetted security researchers, enterprise defenders, and government agencies will receive staged access to test defensive applications. The milestone highlights both the rapid progress in frontier AI reasoning and the growing necessity for strict safety frameworks as artificial intelligence capabilities enter potentially dangerous operational domains.