Check Point is turning vulnerability research from hours to minutes with OpenAI Daybreak, OpenAI News says in a case study focused on the vendor's prevention workflow.
Daybreak is OpenAI's frontier cyber model suite for defenders, built to analyze vulnerabilities, reason through attack paths, and spot gaps in code and configurations. OpenAI News frames it as part of the Daybreak Defense Network, and OpenAI's Daybreak page describes the broader system as an agentic defense loop that moves through inventory, discover, validate, assign, remediate, and prove.
Check Point secures more than 100,000 organizations with network, cloud, workspace and AI security products, according to the company. Check Point Research is the team that investigates emerging vulnerabilities and translates findings into protections. A security signature in this context is a pattern that lets security systems recognize attack traffic, while an indicator of compromise is a forensic artifact that signals an intrusion has happened or is underway.
That translation was the bottleneck. Vulnerability research required specialized expertise and analyst time, so capacity tracked headcount. Now the workflow that supports signature and indicator development runs in minutes instead of hours.
Jonathan Zanger, CTO of Check Point, whose view matters because he leads the company's technology and product direction for that prevention-first approach, points to reasoning as the change. "OpenAI Daybreak can understand vulnerabilities, analyze different attack patterns and scan the code to identify gaps," Zanger says in the case study. He also says the models have matured enough on complex code and misconfigurations to be useful inside production security workflows.
What had to be true before was manual triage. Analysts did the investigation, then authored the detection. What changes now is automation around the investigative work that informs the detection, not the detection itself. What still has to happen is remediation at speed.
That is where Check Point is heading next. The company says it is working with OpenAI to develop Agentic Network Security Orchestration using Daybreak, designed to combine continuous monitoring with operating boundaries defined by the customer and human approval for consequential actions. Customers set security objectives, the system explains findings, recommended actions and risks, and teams decide how to proceed.
The limitation is explicit. Autonomy does not mean auto-execute on high-impact changes. For readers tracking whether AI shortens exposure windows, watch two signals: time from public disclosure to signature delivery, and whether Daybreak-assisted findings move cleanly into fixes that customers can approve and verify without adding new operational risk.
