Agent loop finds and fixes bugs across OpenAI systems

OpenAI mobilized 250+ people to strengthen defenses across hundreds of its systems, and it’s publishing the architecture and a practical playbook so other teams can build the same setup. Its latest cyber models helped find and fix vulnerabilities the company says it might never have discovered otherwise.

The Defense Factory runs as a continuous loop. AI agents find vulnerabilities, validate them, then verify that the fixes work.

The write-up sits on OpenAI’s site. It follows the open letter signed by more than 100 companies, OpenAI and Anthropic included, warning that organizations have only months to get ready for AI-enabled cyberattacks; CrowdStrike, Salesforce, Microsoft and Cloudflare announced their own frontier-AI security efforts in late August and early September 2026.