Key Points

OpenAI announced a new cyber-focused model variant, GPT-5.4-Cyber, which is fine-tuned to be “cyber-permissive” for defensive cybersecurity use cases.
The company is building on its earlier “Trusted Access for Cyber” program by adding an identity-verification flow (via a government ID photo processed by Persona) to reduce friction for cybersecurity-oriented access.
OpenAI also indicates the program is aimed at upcoming, more capable models over the next few months, suggesting a staged rollout for security-focused users.
Despite the emphasis on democratized access, the article notes that top security tools still require an additional Google Form application process, which is viewed as similar in practice to Anthropic’s Project Glasswing.
The write-up highlights the lack of direct mention of Anthropic while positioning OpenAI’s approach as a response within the broader competition around “trusted” access for security work.

Simon Willison’s Weblog

Sponsored by: Teleport — Connect agents to your infra in seconds with Teleport Beams. Built-in identity. Zero secrets. Get early access

14th April 2026 - Link Blog

Trusted access for the next era of cyber defense (via) OpenAI's answer to Claude Mythos appears to be a new model called GPT-5.4-Cyber:

In preparation for increasingly more capable models from OpenAI over the next few months, we are fine-tuning our models specifically to enable defensive cybersecurity use cases, starting today with a variant of GPT‑5.4 trained to be cyber-permissive: GPT‑5.4‑Cyber.

They're also extending a program they launched in February (which I had missed) called Trusted Access for Cyber, where users can verify their identity (via a photo of a government-issued ID processed by Persona) to gain "reduced friction" access to OpenAI's models for cybersecurity work.

Honestly, this OpenAI announcement is difficult to follow. Unsurprisingly they don't mention Anthropic at all, but much of the piece emphasizes their many years of existing cybersecurity work and their goal to "democratize access" to these tools, hence the emphasis on that self-service verification flow from February.

If you want access to their best security tools you still need to go through an extra Google Form application process though, which doesn't feel particularly different to me from Anthropic's Project Glasswing.

Posted 14th April 2026 at 9:23 pm