The AI arms race in cybersecurity is escalating as OpenAI releases a new model specifically for defense, directly challenging a similar tool from rival Anthropic and forcing incumbents to rapidly integrate advanced AI.
Back
The AI arms race in cybersecurity is escalating as OpenAI releases a new model specifically for defense, directly challenging a similar tool from rival Anthropic and forcing incumbents to rapidly integrate advanced AI.

OpenAI is intensifying the competition for enterprise security clients with its new GPT-5.5-Cyber, a specialized artificial intelligence model now in limited preview for cybersecurity teams. The May 7 launch comes just one month after rival Anthropic debuted its own security-focused model, Claude Mythos, signaling a new frontier in the battle against digital threats.
“The barrier to launching sophisticated attacks has effectively collapsed,” said Santanu Dutt, a vice president at cybersecurity firm Zscaler, noting that one person with a frontier AI model can now match what previously required a team of attackers.
The release of GPT-5.5-Cyber confirms a strategic push by leading AI labs to create tailored, high-margin products for specific industries. The move directly pits OpenAI and its key partner Microsoft against Anthropic and its backers Google and Amazon. Cybersecurity incumbents are also moving quickly, with Gen Digital announcing it will leverage the “advanced defense capabilities” of GPT-5.5 as part of a broader AI-first strategy.
This new class of “frontier AI” models presents a profound challenge for the cybersecurity industry, valued in the hundreds of billions of dollars. While the tools can empower defenders to find and fix vulnerabilities at superhuman speeds, they also dramatically lower the skill required for criminals to write malware or orchestrate phishing campaigns, creating a tense and rapidly evolving arms race.
Frontier AI refers to the most advanced models available, capable of reasoning through complex problems and analyzing vast systems for weaknesses. These systems can scan millions of lines of code in hours, a task that could take human teams months. This capability is a double-edged sword. While a company’s security team can use it to patch bugs, an attacker can use the same technology to find and exploit them faster than ever.
Experts warn this is creating a significant imbalance. “Attackers only have to find one gap while defenders have to remediate every vulnerability,” explained Ian Lim, a chief technology officer at Cisco. “With frontier models significantly shrinking the time-to-exploit, organisations can no longer assume patches will arrive before exploitation occurs.” The concern is particularly acute for critical infrastructure like banking, healthcare, and energy grids, which rely on complex, interconnected software that may have hidden flaws.
The market is already adapting to this new reality. Gen Digital, the $5 billion company behind Norton and LifeLock, is evolving from a pure cybersecurity provider into a broader “trust” platform, with its stock reacting positively to an AI-centric strategy. The company reported that its Trust-Based Solutions segment saw bookings grow 24 percent, driven by the integration of AI.
Gen has formed an “AI foundry” team and is building products like Norton Neo, an AI-native secure browser. Underscoring the competitive landscape, Gen is partnering with multiple AI providers, including OpenAI for its GPT-5.5 model, xAI for a new digital concierge, and Anthropic. This multi-provider approach suggests large security firms are hedging their bets, unwilling to be locked into a single AI “ecosystem” as they race to build next-generation defenses. For fiscal 2027, Gen raised its outlook to 8-10 percent revenue growth, citing AI as a key driver.
This article is for informational purposes only and does not constitute investment advice.