OpenAI Says Technical Error Revoked Researchers’ Access to Cybersecurity Program

Several cybersecurity researchers reported on Wednesday that OpenAI abruptly revoked their access to the Trusted Access for Cyber (TAC) program, a limited-access initiative that allows vetted security professionals to use OpenAI’s advanced AI models with fewer guardrails. OpenAI confirmed the issue was caused by an error on its end, and affected users are being asked to reapply and complete verification.

What is the Trusted Access for Cyber Program?

The TAC program is designed to give vetted cybersecurity defenders access to OpenAI’s most capable models, such as GPT-5.6 Sol, with safeguards tailored to authorized defensive security work. This includes vulnerability discovery, secure code review, malware analysis, incident response, and patch validation. The goal is to help trusted researchers find and report bugs faster, while preventing malicious actors from using the same tools to develop exploits. Anthropic offers a similar program called the Cyber Verification Program (CVP).

What Happened to Researchers’ Access?

Multiple researchers took to OpenAI’s official support forums and X to report that their access to the TAC program, specifically the Daybreak Blue tier, was revoked. When they attempted to access ChatGPT’s Cyber page, they saw messages indicating their identity could not be verified or that their account was ineligible. Bitcoin World spoke to five affected researchers, all of whom said they reside outside the U.S. and Europe, suggesting the issue may be regional.

One researcher shared an email from OpenAI stating that access to Daybreak Blue was revoked “due to a technical issue affecting a limited number of users.” The email emphasized, “This was an issue on our end, and not the user experience we want to deliver.” In a forum thread, OpenAI support also cited a “recent technical issue” and asked affected users to reapply and complete verification again.

Why This Matters for Cybersecurity Research

This incident highlights the fragile relationship between AI vendors and the security research community. Researchers rely on programs like TAC and CVP to access models that are less restricted, enabling them to perform legitimate security testing without unnecessary guardrails. When access is suddenly revoked, even due to an error, it can disrupt ongoing vulnerability research and erode trust in these programs. OpenAI’s prompt response and acknowledgment of the issue is a positive step, but the need for re-verification adds friction for researchers who had already been vetted.

OpenAI’s Response and Next Steps

OpenAI has publicly acknowledged the issue, referring to a tweet stating that a “limited set of users’ access to Daybreak Blue is no longer active and they will need to re-verify to maintain their access.” The company has not disclosed how many users were affected or whether the issue is related to a specific region, but all researchers interviewed by Bitcoin World were based outside the U.S. and Europe. Affected researchers are advised to reapply through the TAC program and complete the verification process to regain access.

Conclusion

The temporary revocation of access to OpenAI’s Trusted Access for Cyber program due to a technical error underscores the importance of reliable access for cybersecurity professionals. While OpenAI has taken responsibility and is working to resolve the issue, the incident serves as a reminder of the operational dependencies that security researchers have on AI vendors. Moving forward, clear communication and streamlined re-verification processes will be essential to maintaining trust in these collaborative programs.

FAQs

Q1: What is the Trusted Access for Cyber (TAC) program?
The TAC program is an OpenAI initiative that provides vetted cybersecurity researchers with access to advanced AI models with reduced guardrails, enabling them to conduct defensive security work such as vulnerability discovery and malware analysis.

Q2: Why did OpenAI revoke access for some researchers?
OpenAI confirmed that the revocations were caused by a technical error on their end, affecting a limited number of users. The company is asking affected researchers to reapply and complete verification to restore access.

Q3: Will this affect ongoing cybersecurity research?
While the disruption is temporary, it can delay ongoing research projects that depend on these models. OpenAI’s prompt acknowledgment and resolution efforts aim to minimize long-term impact.