The question around AI, and I mean the pinnacle of AI, not your regular “write me an email”, is shifting. What used to be “what can it do for me?” has now become “who gets to use it?” We saw this recently with Anthropic’s Claude Mythos Preview – a supposed epitome of AI models that will only be shared with a group of firms working with Anthropic for the greater good of cybersecurity. Now, OpenAI seems to have joined this effort, with what it is calling GPT-5.4-Cyber.
What is it? How does it work? And what does OpenAI plan to do with it? Let us explore all that here.
Note that GPT-5.4-Cyber is not a brand-new AI model built from scratch. It is a more cyber-capable version of OpenAI’s latest GPT-5.4. In its announcement, the company says that it has been purposely fine-tuned for cybersecurity work. This has been done in two main ways:
And this is exactly why OpenAI is not making the GPT-5.4-Cyber public.
Simple reason – because OpenAI does not want this level of cyber capability to be openly available to everyone on day one.
The company is folding GPT-5.4-Cyber into its Trusted Access for Cyber, or TAC, framework. This is an identity- and trust-based system that aims to make enhanced cyber capabilities available to verified defenders. The idea is to cut down on the odds of misuse.
With the new release, OpenAI is now expanding TAC to “thousands of verified individual defenders” and “hundreds of teams” that defend critical software. It wants to extend the higher capabilities of its models (from GPT-5.2 to GPT-5.4) to users who are willing to authenticate themselves as cybersecurity defenders with OpenAI.
And herein comes the GPT-5.4-Cyber, which sits at the top tier of this TAC framework. Hence, it is not your normal AI model release. You cannot just open ChatGPT, pick the model, and start experimenting with it. Its enhanced abilities in the field of cybersecurity are deemed way too sensitive to be available to everyone in general.
So who gets it?
Think of OpenAI’s TAC as a pyramid. Only those at the top will be able to request access for the new GPT-5.4-Cyber. For this, the one non-negotiable for now is that only the existing TAC customers may request access to it.
OpenAI says that the existing customers who are “willing to further authenticate themselves as legitimate cyber defenders” may be eligible for the same. And this comes after several tiers of access to other models that have been enhanced for cybersecurity.
These models tend to go easy on safeguards that are usually triggered on dual-use cyber activity. This means they respond to critical security tasks that the general models may usually refuse to act on. This allows the users to use them in “security education, defensive programming, and responsible vulnerability research.”
Say you are in that top tier of TAC and wish to get your hands on the GPT-5.4-Cyber. OpenAI shares the exact ways to do it.
The straightforward way for this is –
Of course, there is no assurance that OpenAI will grant you access to the new model straightaway. Even then, this is the only known way to even have the chance to try your hand at it.
Here is how you can get registered with TAC:
Once OpenAI approves you through this process, it shall provide access to versions of such cyber-enhanced models.
After Anthropic, OpenAI has shown a clear concern – AI is evolving rapidly, and if misused, it can prove hazardous for cybersecurity. The peak capabilities of AI in the field of cybersecurity, then, need to be tightly grasped within the right hands.
And for this, the company has released its most nuanced model within closed doors. Anyone wanting access to it will need to go through a rigorous identification and checks. Only those deserving will get to use it. Simple.
This can be a game-changer when it comes to securing the cyber world as we know it, as it equips the right people with the most powerful tools on the planet. As long as such models stay way ahead of anything that is available in general, defenders will have a considerable edge over the miscreants.