OpenAI says unreleased model Astra may hit its Critical cyber threshold

Responding to the next frontier of critical cyber capabilities

OpenAI disclosed on Aug 7 that internal evals of its upcoming model Astra show enough progress in agentic coding and cybersecurity that it can no longer rule out a Critical rating under its Preparedness Framework. The Critical bar means the model can autonomously find and write zero-day exploits for hardened real-world systems, or devise and execute novel end-to-end attacks given only a high-level goal. OpenAI confirmed Astra was not involved in the earlier Hugging Face incident. It has paused internal Astra work that doesn't meet tightened security controls, added isolated test environments, restricted network/tool access, encrypted model weights, deployed universal monitoring on all agentic Astra applications, and will bring in government and safety organizations for testing.

Why it matters: OpenAI voluntarily disclosed that its next-gen model Astra reached 'critical' risk level in internal testing — the first time a major lab has gone public with such an assessment before release. The post gives concrete capability definitions and touches the sensitive topic of a...