> ## Content Index > Fetch the complete content index at: https://www.notatechguy.com/llms.txt > Use this file to discover other available public pages before exploring further. # OpenAI's Astra hits Critical cybersecurity threshold - URL: https://www.notatechguy.com/openai-s-astra-hits-critical-cybersecurity-threshold/ - Published: 2026-09-01T22:15:15.000Z - Updated: 2026-09-01T22:15:14.000Z - Description: OpenAI's Astra is the first model to meet the Critical cybersecurity threshold under the company's own Preparedness Framework, with stronger release - Author: Marcello Babbili - Tags: Technology & AI, OpenAI, Google OpenAI's Astra model has become the first of the company's AI systems to meet the "Critical" cybersecurity capability threshold under its own Preparedness Framework, according to an announcement posted on 1 September [S¹](https://openai.com/index/path-to-astra?ref=notatechguy.com). The model is shipping with stronger safeguards for release [S¹](https://openai.com/index/path-to-astra?ref=notatechguy.com). What does it mean when a model crosses a line its own maker defined as dangerous, and who decides whether the guardrails hold? **My read:** This is the first time I've seen OpenAI openly state that one of their models has hit the Critical threshold in any capability area and still proceed toward release. The Preparedness Framework, last updated in April 2025 [P⁴](https://cdn.openai.com/pdf/18a02b5d-6b67-4cec-ab64-68cdfbddebcd/preparedness-framework-v2.pdf?ref=notatechguy.com), was designed as an internal checkpoint system, but every checkpoint in it is self-graded. I don't doubt Astra is genuinely capable in cybersecurity tasks. I'm skeptical that "stronger safeguards" is specific enough to evaluate. The announcement tells us a model crossed a threshold. It doesn't tell us what the safeguards actually are, whether they've been tested by anyone outside OpenAI, or what would have happened if the model had hit Critical in a second capability area. ## What "Critical" actually means The Preparedness Framework, now on Version 2 (last updated 15 April 2025), is OpenAI's internal system for evaluating whether a model is too risky to release [P⁴](https://cdn.openai.com/pdf/18a02b5d-6b67-4cec-ab64-68cdfbddebcd/preparedness-framework-v2.pdf?ref=notatechguy.com). It scores models across capability areas, cybersecurity among them, at four risk levels: Low, Medium, High, and Critical. Critical is the top of that scale. When a model reaches Critical in a given area, the framework requires specific safety measures before deployment. OpenAI says Astra has "stronger safeguards for release" [S¹](https://openai.com/index/path-to-astra?ref=notatechguy.com), which is the framework's language for the extra controls triggered when a model hits a higher risk tier. This is the first OpenAI model to reach Critical in cybersecurity specifically [S¹](https://openai.com/index/path-to-astra?ref=notatechguy.com). That tells us two things: Astra is good enough at offensive and defensive security tasks to trigger the company's highest internal risk rating, and OpenAI has decided it can still be released, with guardrails. ## The self-graded exam problem Every claim in this announcement comes from OpenAI evaluating its own model against its own framework. The evidence pack contains no independent verification of the Critical assessment [S¹](https://openai.com/index/path-to-astra?ref=notatechguy.com). The Hacker News discussion, such as it was, had drawn 16 points and zero comments at the time of capture [S³](https://openai.com/index/path-to-astra/?ref=notatechguy.com), hardly a vigorous peer review. OpenAI's framework is a step toward transparency in that it names the levels and publishes the criteria. But the assessment itself remains internal. The tension is structural: the same company that wants to ship the product is the one deciding whether it's safe to ship. That doesn't disappear because the framework exists. It just gets documented. ## Why cybersecurity is the first domino Cybersecurity is one of the capability areas where AI models have been improving fastest and most measurably. A model that can find vulnerabilities, write exploits, or automate penetration testing is also a model that can attack infrastructure. The dual-use nature is the entire reason the Preparedness Framework tracks it separately. OpenAI's earlier safeguards announcement on 18 August signalled that the company was tightening its release process for frontier models. Astra hitting Critical in cybersecurity is the first concrete case where those tightened processes face a real test. ## What to do about it If you run a security team, this is the moment to watch how OpenAI's safeguards perform in the wild rather than on paper. A model rated Critical in cybersecurity will likely be used for defensive tasks like vulnerability discovery, code auditing, and threat analysis by developers who get API access. Consider a mid-sized fintech whose security operations centre uses AI-assisted code review. If Astra-grade models become available through API endpoints, the defensive upside is real: faster vulnerability triage, broader coverage of legacy code. The risk is that the same capability, pointed at someone else's stack, becomes the offensive tool. Your exposure depends less on what OpenAI's safeguards say and more on who else gets access to similar capability levels. One practical step: check whether your existing AI security tooling vendor has published a policy on how they handle models rated at Critical risk levels. Most haven't, because until now no model has carried that label. ## What we don't know yet OpenAI's announcement does not specify what the "stronger safeguards" actually are [S¹](https://openai.com/index/path-to-astra?ref=notatechguy.com). We don't know whether they involve rate limits, capability filtering, red-team gating, or something else entirely. We don't know whether Astra approached Critical in any other capability area, because the announcement only confirms cybersecurity [S¹](https://openai.com/index/path-to-astra?ref=notatechguy.com). We also don't know whether any external party has reviewed the assessment. The framework document itself is public [P⁴](https://cdn.openai.com/pdf/18a02b5d-6b67-4cec-ab64-68cdfbddebcd/preparedness-framework-v2.pdf?ref=notatechguy.com), but the evaluation that placed Astra at Critical is not included in the announcement. The next signal: OpenAI's next model card or safety report, which should detail the specific safeguards applied to Astra. We'll check whether it names the controls or stays at the "stronger safeguards" level of detail. If you want that follow-up in your inbox, subscribe and we'll send it when the report drops. --- *Sources: [S1 — Path to Astra: critical capabilities and frontier safeguards](https://openai.com/index/path-to-astra?ref=notatechguy.com) · [S2 — Path to Astra: critical capabilities and frontier safeguards - OpenAI](https://news.google.com/rss/articles/CBMiUEFVX3lxTE5XVkhISmZOMUx2VV9iblFmYlJERjA5c3RQNzNhUjFvZFl4V1J2S1RDdkdpTG5UNEN3WkNJYV9rWDJjaVpmbzBTbEFST1FjeVVE?oc=5&ref=notatechguy.com) · [S3 — OpenAI: Path to Astra: critical capabilities and frontier safeguards](https://openai.com/index/path-to-astra/?ref=notatechguy.com) · [P4 — Preparedness Framework](https://cdn.openai.com/pdf/18a02b5d-6b67-4cec-ab64-68cdfbddebcd/preparedness-framework-v2.pdf?ref=notatechguy.com) · [P5 — LianjiaTech/astra](https://github.com/LianjiaTech/astra?ref=notatechguy.com) · [P6 — wyh0626/ai-news-agent](https://github.com/wyh0626/ai-news-agent?ref=notatechguy.com) · [P7 — google/path-foundation · Hugging Face](https://huggingface.co/google/path-foundation?ref=notatechguy.com)* ## More from Not A Tech Guy - [MMJailBench: prompt framing is top jailbreak risk across 16 AI models](https://www.notatechguy.com/mmjailbench-prompt-framing-is-top-jailbreak-risk-across-16-ai-models/) - [Open-source trust signals are breaking, study finds](https://www.notatechguy.com/open-source-trust-signals-are-breaking-study-finds/) - [ComfyUI hits GitHub trending at 130,000 stars](https://www.notatechguy.com/comfyui-hits-github-trending-at-130-000-stars/) --- *Generated from an audited evidence pack with primary-source research. Social-media items are discussion signals, not verified facts. Nothing here is financial, legal or medical advice.*