IBM has signed an agreement with OpenAI ’s Daybreak Cyber Partner program , a collaboration aimed at integrating advanced AI models into enterprise security operations. The partnership introduces a new application security service that leverages OpenAI’s capabilities to identify and confirm vulnerabilities in software faster than traditional tools. This service goes beyond standard code scanning by using AI to analyze applications and confirm whether suspected vulnerabilities are actually exploitable, addressing a significant challenge in security work typically assigned to human teams.
See also: GPT-5.5-Cyber: OpenAI strengthens Daybreak for code security
IBM aims to help businesses keep up with rapidly evolving threats. The confirmation feature specifically addresses a common problem that security teams face: conventional scanners often inundate them with alerts, most of which are harmless and few of which can be effectively evaluated. This problem not only burdens security teams, but can also lead to the loss of critical information, as real threats can be lost among the many false alerts.
The service is delivered through IBM’s AI consulting platform , IBM Consulting Advantage, which connects the client’s application environment to AI models in a controlled manner. This approach ensures that the AI operates within the client’s environment, with read-only access to code repositories and limited execution capabilities, allowing it to examine the software without the ability to modify it. The service is available now, with further integrations planned as part of the Daybreak program.
This release is part of a broader initiative, including Project Lightwell, backed by a $5 billion investment from IBM and Red Hat. Lightwell is described as an enterprise security hub staffed by engineers to patch, verify, and manage open source across the software supply chain.
See also: Elon Musk lost the lawsuit against OpenAI – here's why
It uses OpenAI's capabilities along with other advanced models, focusing on the often neglected open source dependencies that underpin most modern software.
The timing of these developments coincides with a year in which AI has emerged as both a defense tool and a potential weapon. Recent research has demonstrated AI’s ability to uncover previously unknown vulnerabilities, highlighting the dual use of these technologies. AI’s ability to identify previously undiscovered vulnerabilities is a significant advantage for enterprise security, allowing it to prevent attacks before they occur.
As vendors and governments form alliances to address cybersecurity challenges, IBM’s initiative positions it firmly on the defensive side of this evolving landscape, leveraging OpenAI models as a key component. Future integrations under the Daybreak program are expected to enhance the application security service, indicating that this is just the beginning of IBM’s efforts in this area.
See also: OpenAI is considering legal action against Apple
Overall, IBM argues that AI designed for software development can also be effectively applied to secure that software at scale. Using AI for enterprise security offers a new dimension to protecting data and systems, allowing businesses to respond faster and more effectively to threats. Partnering with OpenAI and integrating its advanced models into application security is an important step towards strengthening cybersecurity globally.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
