Daybreak 前线防御者计划：投入 10 亿美元保护基本服务

今天，OpenAI 推出 Daybreak 前线防御者计划。这是一项新的全球倡议，旨在帮助一线防御者运用前沿 AI 网络安全能力，保护美国及世界各地的基本服务。该倡议包括：

• 投入 10 亿美元的全球承诺，在美国及全球扩大 Daybreak 网络安全模型和产品的补贴使用范围，并提供培训、技术支持和合作伙伴关系。
• Daybreak 美国计划将 OpenAI 为保护美国人日常依赖的系统而开展的所有美国项目整合起来——覆盖供水、供电、地方政府和银行等领域，其中包括与多州信息共享与分析中心（MS-ISAC）开展的新试点。
• 通过 Daybreak 防御网络推出超过 35 款企业产品及由合作伙伴运营的服务，将 Daybreak 网络安全模型集成至企业防御者已经使用的工具、服务和工作流程中。

我们每天都依靠网络防御者保护维持社区运转的系统：从水龙头流出的自来水、为家庭和企业供能的电力、提供公共服务的地方政府系统，以及人们放心托付资金的金融机构。许多机构人员和预算有限，却要保护复杂且老化的系统。

未来几个月，随着世界各地模型的能力不断增强，AI 驱动的网络攻击将变得更加普遍且复杂。这一变化要求所有组织提高警惕。防御者必须立即行动：在攻击者动手前测试系统、发现弱点并加强防御。

前沿 AI 能帮助防御者加快行动。我们正处于一个防御者窗口期：在攻击者利用安全缺口之前借助 AI 将其补上的机会正在不断缩小。我们的职责是将强大工具交到防御者手中，帮助他们保护自己负责的系统和人员。

上周，我们 呼吁集体行动，抓住这一窗口期；网络安全、科技、关键基础设施、金融和 AI 等领域的 150 多家组织与我们共同响应。任何一家公司都无法独力保障我们共同依赖的系统安全。每个组织都能发挥作用，而防御者需要借助工具加快行动。

今天，OpenAI 作出重大承诺，提供切实帮助。Daybreak 前线防御者计划将投入 10 亿美元，用于补贴前沿网络安全能力的使用，并提供实操培训、技术协助和新的合作伙伴关系，让保护人们日常所依赖服务的组织获得这些能力。我们将从差距最大的地方着手：支持那些责任重大、却不具备全球大型企业资源的防御者。我们的目标是建立一种模式，保护美国人依赖的服务，并与合作伙伴携手，让世界各地的一线防御者都能获得前沿网络安全能力。

OpenAI 承诺投入价值 10 亿美元的 Daybreak 补贴使用权限，首先从美国开始，帮助资源有限的网络防御者运用前沿 AI，并计划在未来六个月内落实这笔投入。作为“Daybreak 美国计划”承诺的一部分，我们将优先支持基本服务运营方，包括供水和污水处理系统、电网运营商，以及州和地方政府、社区与区域银行、非营利组织、开源项目维护者和其他安全资源有限的组织。许多此类团队要在缺少大型企业所拥有的预算、工具和专业知识的情况下，保护复杂且往往老化的系统，应对发展更快的威胁。Daybreak 使用权限可以帮助他们审查旧版代码、分析可疑活动、识别并验证漏洞、优先处理最严重的风险，以及开发和测试修复方案。未来几周，我们计划将这一模式扩展至合作伙伴国家。

这项承诺以我们已向面临紧迫威胁的基础设施防御者提供的支持为基础。美国供水系统近期遭受攻击后，我们向受影响的州和公用事业机构提供了最高价值 100 万美元的免费 API 额度、Daybreak 使用权限及技术协助。供水系统保持运行、社区继续获得所依赖服务的同时，相关团队得以利用这些支持审查代码和系统配置、验证调查结果、开发补丁并确认修复效果。

Earlier this year, we launched Daybreak, which enables verified public and private sector defenders to use advanced AI for authorized cyber defense. Daybreak Blue supports common defensive work with our mainline models; Daybreak Red gives approved organizations access to specialized cyber models for more sensitive and technically demanding work. Thousands of defenders across 2,000 approved organizations and workspaces already use Daybreak, including cybersecurity companies, defense organizations, and law enforcement organizations.

Alongside broader access, we are increasing hands-on support for frontline defenders in essential sectors. We have convened an ongoing series of meetings with frontline defenders, including utilities, state and local governments, community banks, and others, to learn from their work and help them use our tools to harden their systems, and we will continue those convenings as Daybreak for Frontline Defenders expands. This week’s second gathering of utility companies brought together participants representing 40 states and the District of Columbia that collectively provide essential services to more than half of the U.S. population.

Access to capable models is only useful if frontline defenders have the training and support to use them effectively. Today, we are announcing a public sector and water-focused pilot with the Multi-State Information Sharing and Analysis Center, or MS-ISAC, to train and support state, local, tribal, and territorial cyber defenders. The pilot will pair Daybreak access with guided training and hands-on assistance for an initial group of public sector and water system defenders, helping them validate and prioritize findings, coordinate remediation, and develop a repeatable approach that can be expanded over time.

MS-ISAC provides cyber-threat intelligence, incident-response support, real-time information sharing, and other shared defenses to thousands of public-sector organizations, including utilities, public hospitals, K–12 schools, and law-enforcement agencies. Its members protect many of the systems closest to Americans’ daily lives—from drinking water and public hospitals to schools, emergency services, and local governments. The pilot is intended to develop a model that could eventually benefit organizations across that broader community.

Support also needs to reach defenders through the tools and services they already use. Today, our partners across the Daybreak Defense Network are announcing more than 35 partner products and partner-operated services that bring OpenAI’s Daybreak cyber models into the hands of the enterprise. Our goal is collective action becoming operational, with products, services, and workflows defenders can use.

Ultimately, the goal is not just to find more vulnerabilities, but to fix them faster. This week, we published OpenAI’s approach to building a Defense Factory⁠: a continuous, agent-first operation that builds on existing security and engineering tools to find and validate vulnerabilities and prepare tested fixes for review. We are sharing its architecture and lessons so other defenders can adapt the approach to their own environments.

防御者窗口期不会永远持续。我们现在有机会确保前沿 AI 为防御者带来的优势不只惠及大型企业和资源最充足的安全团队，也能惠及那些安全状况影响数百万人生活的社区和机构。

这不仅意味着提供高能力模型的使用权限。还意味着帮助供水机构、社区银行、医疗系统和地方政府等一线防御者发现漏洞、将漏洞转化为经过测试的修复方案，并保护他们服务的人群。Daybreak 前线防御者计划体现了我们的承诺：将这种能力交到最需要它的一线防御者手中。我们的目标是利用前沿 AI，让美国人依赖的系统更难被攻击、更容易修复。

符合条件的州和地方政府、关键基础设施运营商、非营利组织、开源项目维护者及支持机构，可访问 Daybreak 网站，进一步了解使用权限、技术协助、培训及其他网络防御支持。