SentinelOne says OpenAI's Daybreak speeds malware analysis
In an OpenAI customer case study, SentinelOne says the Daybreak product cut malware reverse-engineering from four to six weeks to about eight hours, which would let defenders cover far more of the threat landscape.
OpenAI has published a customer story about SentinelOne, the North American enterprise security company. In it, SentinelOne says OpenAI's Daybreak product has cut the time needed to reverse-engineer malware from 4–6 weeks to about 8 hours.
"Something that would've taken a top-flight researcher four or six weeks to do, AI is now doing at human-level output in something like eight hours," the company says in the case study.
SentinelOne describes the main gain as coverage rather than just speed. "Faster reverse engineering enables us to map a much larger part of the malware landscape and keep pace with how it changes," the company says, adding that this gives its researchers "a clearer picture of how threats are connected and how those relationships evolve."
The case study also says OpenAI is "shifting the advantage to defenders by providing expert level cyber capability to everyone in the development team."
The material is promotional and published by OpenAI, and it leaves several things out. It does not say which malware samples or how many were analyzed. It does not say how "human-level output" was measured, or how much human review the AI's results still need. It also does not explain how Daybreak works or which underlying models it uses. None of the claims has been checked independently.
Still, if the 8-hour figure holds up across a wide range of malware, it would be a big change in what security research teams can get done.