OpenAI releases Astra model for cyber and software engineering work
OpenAI released Astra on Thursday, describing the new system as its most powerful and capable AI model to date. The company is initially providing it to customers of Daybreak, its cybersecurity programme, before extending access over the following week to paid Pro, Plus, Enterprise and Business plans and to API users.
OpenAI positions Astra as a model for computer and browser use, claiming improvements in speed, accuracy and safety. President Greg Brockman called it the company’s most intelligent and most aligned model, and said it represented a change in the kinds of work users can delegate to AI.
Cybersecurity and coding claims
OpenAI said it tested Astra across security benchmarks and highlighted an ability to identify and develop zero-day exploits that could help defenders locate and patch weaknesses. The company also called Astra its best model for software engineering so far.
Its published benchmark results place Astra ahead of OpenAI’s Sol and Anthropic’s Fable on tasks including bug discovery, terminal execution and answering questions about codebases. Those results are central to OpenAI’s argument that the model can support technical work involving software and security operations.
The commercial rollout arrives as OpenAI continues to build its enterprise organisation. The company’s revenue leadership changes, including OpenAI's revenue leadership expansion, sit alongside a broader effort to serve customers through paid plans, security-focused products and API access.
Monitoring remains a central question
Astra has also prompted scrutiny because it uses a reasoning technique called opaque recurrence. The technique can obscure chain-of-thought monitoring, a process researchers use to audit how and why a model reached a decision.
Chief scientist Jakub Pachocki said monitoring a model’s reasoning remains a critical form of oversight, while becoming more difficult as capabilities increase. He said more capable systems may perform harder tasks with fewer language tokens, or with no language tokens, reducing visibility into those tasks.
On whether Astra marks the arrival of artificial general intelligence, Brockman said AGI is no longer a contractual trigger in OpenAI’s partnership with Microsoft and is instead a mission or spiritual concept. He said readers could decide whether Astra qualifies, while adding that he personally believed the threshold had been reached.
Business implication
Organisations considering Astra for coding or security workflows should assess the vendor’s benchmark claims alongside their own testing, and define access controls and review processes where reduced monitorability could affect high-risk work.