openai
Safeguard articles tagged "openai" — guides, analysis, and best practices for software supply chain and application security.
22 articles
ChatGPT Atlas and the Permanent Browser-Agent Injection Problem
OpenAI shipped ChatGPT Atlas in October 2025 and admitted by December that prompt injection in AI browsers may never be fully solved. Defenders need a posture, not a patch.
GPT-5.2 System Card Update: What Changed Since August
OpenAI shipped the GPT-5.2 update to the GPT-5 system card on December 11, 2025. We dig into the preparedness scoring, the cybersecurity capability claims, and what changed for downstream defenders.
Daybreak vs. Mythos: 2026 Is the Year the Frontier Labs Entered Defensive Security
OpenAI's Daybreak and Anthropic's Mythos both bet that frontier models can find and fix vulnerabilities at scale. The discovery race is real — but the bottleneck, the cost curve, and the winning strategy all point the same direction: be model-agnostic.
Patch the Planet: What AI-Generated Fixes Actually Mean for Open-Source Maintainers
OpenAI's Patch the Planet, co-founded with Trail of Bits, wants to move widely-used open-source projects from findings to fixes. The ambition is right — but it shifts the bottleneck to maintainer review, patch provenance, and the trust of machine-authored code.
OpenAI's Daybreak: An Honest Assessment of Codex Security, GPT-5.5-Cyber, and the Find-Validate-Patch Loop
Daybreak is the most complete attempt yet to turn a frontier model into a vulnerability-finding-and-fixing system. We break down what it gets right, where the verification and economics still bite, and how it fits alongside a purpose-built engine.
GPT-5.5-Cyber and Trusted Access: The Dual-Use Governance Questions Defenders Should Be Asking
OpenAI's Daybreak ships a permissive, offensive-capable model behind a tiered Trusted Access program and a wave of government partnerships. Here's what model-risk, procurement, and security-policy teams should demand before they rely on it.
GPT-5 Launch: Reading the System Card for Supply-Chain Risk
GPT-5 shipped August 13, 2025 under OpenAI's Preparedness Framework v2. Here's what the system card tells security teams about deployment risk.
Anthropic Claude vs OpenAI GPT: Enterprise Security in 2026
A pragmatic comparison of Claude and GPT for enterprise deployments in 2026, focused on the security and governance controls that matter to a buyer.
OpenAI Preparedness Framework v2: April 2025 Update
OpenAI released Preparedness Framework v2 on April 15, 2025 with sharper thresholds, an AI self-improvement category, and clearer disclosure requirements. We unpack the operational changes.
OpenAI API Key Leakage on GitHub at Scale
A senior engineer's view of OpenAI API key leakage on GitHub at scale, why automated secret scanning misses so many, and what actually stops the bleeding.
Griffin AI vs OpenAI Pricing: Security Workloads
Per-token pricing on the OpenAI API looks cheap on a single call and expensive on a year-long security workload. Griffin AI's pricing reflects the architecture.
Griffin AI vs GPT-5: Compliance Posture
Compliance posture is about what you can prove, not what you can do. GPT-5 has impressive capabilities; Griffin AI is engineered to be defensible.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.