OpenAI has launched GPT-6 Astra, its most capable AI model yet and the first OpenAI system to reach the company’s highest disclosed cybersecurity capability level. The new model is designed to operate computers, write and test software, conduct research and complete complex professional tasks, while its unprecedented cybersecurity abilities have prompted OpenAI to deploy some of its strongest safeguards to date.
Astra represents a significant expansion of what OpenAI’s models can do beyond answering questions or generating content. The company says the model can navigate software, fill out online forms, update customer records, organize calendars, conduct online research, work inside documents, and help build and test websites. It is also designed to handle longer, multistep assignments that require it to take actions and adjust as the work progresses.
What OpenAI Means by “Critical”
The “Critical” designation does not mean Astra has been released with unrestricted access to computers or networks. “Critical” is a capability classification under OpenAI’s Preparedness Framework — and in Astra’s case, it applies specifically to cybersecurity.
OpenAI says that with the appropriate tools and access, Astra has demonstrated the ability to identify previously unknown security vulnerabilities and develop functional ways to exploit weaknesses in hardened systems without requiring a person to direct every individual step. The company says Astra represents a substantial increase in vulnerability identification and exploit-development capability compared with GPT-5.6 Sol.
That distinction is important for everyday ChatGPT users. Astra cannot simply reach into an outside computer system because someone starts a conversation with it. What an AI system can actually do depends in part on the tools, permissions, computer environments and network access available to it.
OpenAI Adds New Safeguards
OpenAI says Astra’s capabilities required additional security measures before deployment. Those include stronger encryption and access controls around model checkpoints, monitoring of tool-using activity, systems capable of blocking potentially dangerous behavior and human intervention when monitoring detects serious problems.
The company has also introduced more restrictive cybersecurity boundaries for accounts considered higher risk and says Astra has been trained to refuse requests that violate its cybersecurity safety policies.
OpenAI’s concern is twofold: preventing malicious users from employing a highly capable model to attack protected systems and preventing an AI agent equipped with tools from taking unauthorized harmful actions on its own.
A Different Kind of AI Model
Cybersecurity is only one part of the Astra launch. OpenAI is positioning the model as an AI capable of carrying out substantial portions of computer-based work rather than merely explaining how that work should be done.
Astra can work across browsers and software applications, analyze information, create documents, write code and perform sequences of actions needed to finish a task. OpenAI describes it as its strongest model for computer use, coding, research and complex end-to-end professional work.
Access is beginning with a limited group of organizations before expanding more broadly to ChatGPT Plus, Pro, Business and Enterprise users and developers through the API over the coming days.
The Readovia Lens
Astra marks an important transition in the development of consumer and workplace AI. As models become increasingly capable of acting inside computer environments rather than simply producing answers, the permissions and tools connected to them become just as important as the intelligence of the models themselves.
The “Critical” designation is significant because OpenAI has never previously placed one of its models at that cybersecurity capability level. But it should be understood in context: Astra’s most advanced cyber abilities depend on access and tools that are not automatically available simply because someone is using ChatGPT.
For users, the larger change may ultimately be more visible in everyday work. AI is steadily moving from something people ask for information to something capable of taking a goal, navigating software and completing much of the work required to accomplish it.
