Daybreak 前線防禦人員計劃：投入 10 億美元保護必要服務

今天，OpenAI 推出全新的全球計劃：Daybreak 前線防禦人員計劃，協助前線防禦人員運用前沿 AI 的網絡安全能力，保護美國及世界各地的必要服務。計劃包括：

• 投放 10 億美元的全球承諾，致力於美國及全球範圍擴大對 Daybreak 網絡安全模型與產品的資助式存取權限，並提供培訓、技術支援及建立合作夥伴關係。
• Daybreak for America 整合 OpenAI 在美國保護民眾日常所依賴系統的所有工作，從供水、供電到地方政府及銀行服務，當中包括與多州資訊共享與分析中心（MS-ISAC）開展的新試點計劃。
• 透過 Daybreak Defense Network，提供逾 35 項企業產品及由合作夥伴營運的服務，將 Daybreak 網絡安全模型整合至企業防禦人員現有的工具、服務及工作流程。

我們每天都仰賴網絡防禦人員保護維持社區運作的系統：從水龍頭流出的食水、為家居和企業供電的電力、提供公共服務的地方政府系統，以至人們託付資金的金融機構。許多團隊人手和預算有限，卻要保護複雜且日益老化的系統。

未來數月，隨着全球各地的模型能力日益提升，AI 驅動的網絡攻擊將更為普遍和複雜。這項轉變為所有機構敲響警鐘。防禦人員必須立即行動：趕在攻擊者之前，全面測試各項系統、找出安全弱點並加強防禦。

前沿 AI 可協助防禦人員加快行動。我們正處於防禦人員的機遇之窗：在攻擊者利用安全缺口之前，運用 AI 收窄缺口的機會正在消逝。我們的角色是把強大工具交到防禦人員手中，讓他們能保護自己負責的系統和人員。

上週，我們 呼籲採取集體行動把握這個窗口，並獲網絡安全、科技、關鍵基礎設施、金融及 AI 領域逾 150 個機構響應。沒有任何一家公司能獨力保障所有人賴以維生的系統。每個機構都有責任參與，而防禦人員需要合適工具來加快行動。

今天，OpenAI 作出一項重大承諾，協助應對這項挑戰。Daybreak 前線防禦人員計劃整合 10 億美元資助，涵蓋前沿網絡安全的存取權限、實務培訓和技術協助，以及新的合作夥伴關係，將這些強大能力交予守護大眾日常生活服務的機構。我們會從差距最大的地方着手：支援肩負重大責任、卻不具備全球大型企業資源的防禦人員。我們的目標是建立一套能保護美國人所依賴服務的模式，並與合作夥伴攜手，把前沿網絡安全能力交到全球前線防禦人員手中。

OpenAI 承諾提供價值 10 億美元的 Daybreak 資助式存取權限，協助資源有限的網絡防禦人員運用前沿 AI，首階段以美國為重點，目標是在未來六個月內投入使用。作為「Daybreak for America」承諾的一部分，我們會優先支援必要服務營運者，包括供水和污水處理系統及電網營運者，以及州和地方政府、社區和地區銀行、非牟利機構、開源軟件維護人員，與其他安全資源有限的機構。這些團隊中，不少要在缺乏大型企業所擁有的預算、工具或專業知識下，保護複雜且往往老化的系統，應對迅速演變的威脅。Daybreak 存取權限可協助他們審查舊有程式碼、分析可疑活動、識別並驗證漏洞、優先處理最嚴重的風險，以及開發和測試修復方案。未來數週，我們計劃把這套模式擴展至合作夥伴國家。

這項承諾建基於我們現時為面臨迫切威脅的基礎設施防禦人員所提供的支援。美國供水系統近期遇襲後，我們向受影響的州份及公用事業提供最高 100 萬美元的免費 API 積分、Daybreak 存取權限和技術協助。各團隊得以運用這些支援審查程式碼和系統設定、驗證發現、開發修補程式並確認修復成效，同時維持供水系統運作，確保社區繼續獲得所需服務。

Earlier this year, we launched Daybreak, which enables verified public and private sector defenders to use advanced AI for authorized cyber defense. Daybreak Blue supports common defensive work with our mainline models; Daybreak Red gives approved organizations access to specialized cyber models for more sensitive and technically demanding work. Thousands of defenders across 2,000 approved organizations and workspaces already use Daybreak, including cybersecurity companies, defense organizations, and law enforcement organizations.

Alongside broader access, we are increasing hands-on support for frontline defenders in essential sectors. We have convened an ongoing series of meetings with frontline defenders, including utilities, state and local governments, community banks, and others, to learn from their work and help them use our tools to harden their systems, and we will continue those convenings as Daybreak for Frontline Defenders expands. This week’s second gathering of utility companies brought together participants representing 40 states and the District of Columbia that collectively provide essential services to more than half of the U.S. population.

Access to capable models is only useful if frontline defenders have the training and support to use them effectively. Today, we are announcing a public sector and water-focused pilot with the Multi-State Information Sharing and Analysis Center, or MS-ISAC, to train and support state, local, tribal, and territorial cyber defenders. The pilot will pair Daybreak access with guided training and hands-on assistance for an initial group of public sector and water system defenders, helping them validate and prioritize findings, coordinate remediation, and develop a repeatable approach that can be expanded over time.

MS-ISAC provides cyber-threat intelligence, incident-response support, real-time information sharing, and other shared defenses to thousands of public-sector organizations, including utilities, public hospitals, K–12 schools, and law-enforcement agencies. Its members protect many of the systems closest to Americans’ daily lives—from drinking water and public hospitals to schools, emergency services, and local governments. The pilot is intended to develop a model that could eventually benefit organizations across that broader community.

Support also needs to reach defenders through the tools and services they already use. Today, our partners across the Daybreak Defense Network are announcing more than 35 partner products and partner-operated services that bring OpenAI’s Daybreak cyber models into the hands of the enterprise. Our goal is collective action becoming operational, with products, services, and workflows defenders can use.

Ultimately, the goal is not just to find more vulnerabilities, but to fix them faster. This week, we published OpenAI’s approach to building a Defense Factory⁠: a continuous, agent-first operation that builds on existing security and engineering tools to find and validate vulnerabilities and prepare tested fixes for review. We are sharing its architecture and lessons so other defenders can adapt the approach to their own environments.

防禦人員的機遇之窗不會永遠敞開。當前的機遇，是確保前沿 AI 為防禦人員帶來的優勢，不只惠及大型企業和資源最充裕的安全團隊，亦能惠及那些安全狀況影響數以百萬計民眾的社區和機構。

這不僅是提供具備強大能力的模型存取權限。這也意味着協助供水機構、社區銀行、醫療系統和地方政府等前線防禦人員找出漏洞、將漏洞轉化為經測試的修復方案，並保護其服務對象。Daybreak 前線防禦人員計劃體現了我們的承諾：把這種能力交到最需要的前線防禦人員手中。我們的目標是運用前沿 AI，令美國人依賴的系統更難受到攻擊，也更容易修復。

符合資格的州和地方政府、關鍵基礎設施營運者、非牟利機構、開源軟件維護人員及支援機構，可瀏覽 Daybreak 網站，進一步了解存取權限、技術協助、培訓及其他網絡防禦支援。