OpenAI Shipped Its First Cyber-Critical Model: The 30-Minute Hardening Pass Before It Reaches Your Account
GPT-6 Astra landed September 3 and is the first model OpenAI rates Critical for cyber capability under its own framework. The attacks that reach a 30-person company are still boring, and 30 minutes closes most of them.
What happened. OpenAI released GPT-6 Astra on September 3. It went first to a limited set of organizations through the Daybreak program, with rollout over the following days to ChatGPT Plus, Pro, Business, and Enterprise users, plus the API and AWS. OpenAI says Astra is stronger at computer use, multi-step workflows, staying oriented on a long task, and respecting task boundaries.
The line worth reading twice. OpenAI classified Astra as its first model to reach the Critical cybersecurity level under its Preparedness Framework. In OpenAI's own definition, that threshold means a model can identify and build functional zero-day exploits in hardened real-world systems without a human driving it. OpenAI kept the advanced cyber capability behind restricted access, opened it to a small alpha group for defensive work, and added stricter isolation, checkpoint encryption, and monitoring of full model trajectories.
So what for a business your size. Nobody is burning a zero-day on your job-costing spreadsheet. The read-through is simpler: capability demonstrated at a frontier lab shows up in criminal tooling on a lag, and the attacks that actually reach a 30-person company stay unglamorous. A convincing wire email. A password reused across four tools. An integration you approved two years ago that still has full inbox access. Cheap defenses beat those, and they keep beating them regardless of how strong the attacker's model gets.
The 30-minute pass
- Turn on MFA everywhere money or mail lives. Bank, payroll, email, payment processor, domain registrar. Use an authenticator app or a hardware key rather than text messages.
- Set one out-of-band rule for money. Any change to wire instructions, banking details, or a vendor's remit-to address gets verified by a phone call to a number you already had on file. Put it in writing and tell your bookkeeper today.
- Revoke stale integrations. Open the connected-apps page in your email and your file storage. Anything nobody has used in 90 days comes off.
- End shared logins. Every person gets their own seat in the tools that touch customer data. Shared credentials make a breach untraceable, which is the expensive part.
- Write down who can approve a payment over $2,500 and who confirms it. Two names, two steps, one sentence in your operations doc.
One more thing, for when Astra reaches your account. A new model behind the same interface means your saved prompts are running somewhere new. Take one real task where you already know the right answer and run it through before you trust the model inside a workflow.
Grounded in OpenAI's GPT-6 Astra safety overview and CNBC and Bloomberg coverage dated September 3, 2026.