OpenAI releases GPT-5.4-Cyber, a fine-tuned variant for defensive cybersecurity work

OpenAI has released GPT-5.4-Cyber, a variant of GPT-5.4 fine-tuned specifically for defensive cybersecurity use cases. According to OpenAI, the model is "cyber-permissive" and designed to enable security research and defensive applications.

The release appears to be OpenAI's response to Anthropic's Claude Mythos, a restricted model for security researchers announced earlier this month.

Trusted Access for Cyber program

Alongside the model release, OpenAI is expanding its Trusted Access for Cyber program, originally launched in February 2026. The program allows users to verify their identity using a government-issued ID processed through Persona, a third-party identity verification service. Verified users gain "reduced friction" access to OpenAI's cybersecurity-focused models.

Access to OpenAI's most advanced security tools still requires completing an additional application via Google Form, despite the company's stated goal to "democratize access" to these capabilities.

Limited details on capabilities

OpenAI's announcement provides minimal technical details about GPT-5.4-Cyber's specific capabilities, benchmark performance, or how the fine-tuning differs from the base GPT-5.4 model. The company emphasizes its existing cybersecurity work and positions the release as preparation "for increasingly more capable models from OpenAI over the next few months."

Pricing, context window size, and performance metrics for GPT-5.4-Cyber have not been disclosed.

What this means

OpenAI's move to create a cybersecurity-specific model variant signals the growing complexity of AI safety considerations around security research. The dual-access approach—self-service verification for basic access, manual application for advanced tools—mirrors Anthropic's restricted access model for Claude Mythos, suggesting industry convergence on tiered access controls for security-capable models. However, the lack of technical details makes it difficult to assess how GPT-5.4-Cyber's capabilities compare to competing offerings or what specific cybersecurity tasks it's optimized for.