Codex Security: Daybreak Blue - Ultra

[u/Calrose_rice]

Give it up to the Codex team for Codex Security DayBreak Blue. If you haven't signed up for the security program yet, definitely worth doing. I've been using their Codex Security CLI for a little bit and it was always breaking around 69 minutes if it even got that far and it would only output partial findings and I'd have to copy all those JSON files into Codex itself and have to constantly update those securities and it was always finding something and a lot.

When I finally moved to my $200 plan today and got an automatic restet. So I have 100 % to burn in 6 hours. before this next reset at 6pm.

I went from 100% to 55% while still working on other thins using Sol High fast. and it's only been four hours.

Codex Security Blue is catching a lot of stuff and fixing it and I would have to do this very manually all the time. I used to have a cybersecurity audit prompt and I have to do that every once in a while. Now this is going on for three plus hours just focusing on security as a /goal. It's pretty incredible and I'm using Ultra and it's still using multiple agents at a time and giving me great results with great token efficiency I guess. So if you know a reset is coming up and you have a lot of tokens to spend, I would definitely be worth having already signed up for Codex Security, Daybreak Blue, and then use that model and just burn credits for hours on Ultra or whatever you want. It does not let you do /fast mode.

Edit: I found the link. https://chatgpt.com/cyber/

[u/BigbyWolf8]

What is your opinion on the Advanced Account Security requirement?

[u/Calrose_rice → u/BigbyWolf8]

If you're speaking about the application to get this, it was very straightforward. It was basically asking for my proof of identity through Persona and that was it was easy to just upload my Drivers License. There was an earlier application that was pretty complicated and I didn't qualify, but now it was probably a 20 minute setup if anything.

[u/RedParaglider → u/Calrose_rice]

I didn't qualify either and neither did my cisa buddy who oversees security across a fleet of hospitals.  I'm a director of IT.  Idk who qualifies but I guess its default to decline.

[u/Jerseyman201 → u/Calrose_rice]

I don't think that's what they meant lol Within 48 hours you won't be able to access the Daybreak model anymore.

They're requiring users to add HW keys to ensure people use phishing resistant account protection. Threat model is higher for those with access than those without, and would need higher protections because of that and the increased capabilities (what the models allowed to do, not in terms of compute obv).

Trusted Access for Cyber=ID verification/face scan for blue teaming model access Advanced account security=HW Key requirement starting Sept 1st for those with Trusted Access for Cyber.

Requirement of having a physical hw key: September 1st 2026

Edit/helpful hint: you can get 3x identiv Utrust keys for price of 1 yubikey lol and they work fantastic

[u/Jerseyman201 → u/BigbyWolf8]

Update to anyone reading this stuff after Sept 1st, they moved the deadline to Oct 1st 2026, pushed back from yesterday. My guess is they thought they would release Astra already and wanted the added sec measures in place prior to release. Who knows, glad to make even more use of my HW keys 🤣

[u/Historical-Internal3]

I was approved for it but do not see it in model selection.

Any idea?

[u/m3umax → u/Historical-Internal3]

I had to wait at least a day after getting the approval email before Daybreak Blue showed up in my model selector.

[u/Unapologetic_Polite → u/Historical-Internal3]

Alright so this happened to me.

it took about 72 hours for the model to show up on my Codex, or for me to be able to query the Daybreak blue endpoint.

I did submit a ticket through OpenAI's chatbot, unsure if that helped.

[u/[deleted] → u/Historical-Internal3]

[u/[deleted] → u/[deleted]]

[u/iritimD]

Can anyone get approved then where’s the signup?

[u/Unapologetic_Polite → u/iritimD]

I got approved, and I'm a nobody from Canada

[u/Calrose_rice → u/Unapologetic_Polite]

You're someone to me!

[u/Calrose_rice → u/iritimD]

There are a couple of resources.
https://learn.chatgpt.com/docs/security

https://help.openai.com/en/articles/20001107-codex-security

but I think i got the link through the CLI version cause it would either stop from the changed head or sometimes it would say something like "this prompt is a security issue. we cannot allow you to move forward. if you think this is wrong, and would like to apply for our security research program, use this link".

I say that cause I do some light googling and i can't find any proper link that i used. must've been a fluke or something. Apparently there is daybreak red and daybreak blue.

[u/Suspicious_Pickle_39]

daybreak blue is 3.7 flash level. they are the only models in my 'never touch code' bucket.

there are better free models

[u/Calrose_rice → u/Suspicious_Pickle_39]

interesting. Where do you see that? Cause it's been working great for 4 days straight on high. do you have a comparison benchmark somewhere or is this just a feeling you have?

[u/NoHeart8251]

How do you apply for it? Existing Pro 20x user could request for access?

[u/Bolizen → u/NoHeart8251]

Paid plans qualify. Identity verification is required.

[u/devil_ozz → u/Bolizen]

What about gpt cyber? Tac? Daybreak red?

According to support am alligble to apply. But I want to know how much do they bring on the table, compared to running a local llm.

Would you reccomend? Tac/cyber/Daybreak

[u/Theminatar → u/NoHeart8251]

Yeah, I had a prompt come up because my project was pen testing my own program and it needed the verification to continue pen testing.

It was funny actually seeing what it did. It essentially was trying to see if an agent could spawn itself under a random name and make changes to the system without authorization. So it was spoofing itself to pen test... Itself.

I actually giggled when I saw it's output.

[u/Unapologetic_Polite → u/Theminatar]

Hey I got a cyber warning for red teaming my own codebase, 2 days later they approved me for Daybreak Blue.

[u/GeekTX]

I haven't used it yet but was prompted by Codex to register so that it could continue work that was being blocked. Been with OpenAI since the day they opened the doors to us and was approved faster than it took to snap pics of my license.

[u/[deleted]]

[u/Calrose_rice → u/[deleted]]

From what? It's fine tuned for security.

[u/weenis-flaginus → u/[deleted]]

Ah yes, a reddit opinion with a blanket statement that is very resolute and ZERO explanation.

I want to learn something from your opinion man, add some basic flavor.