Cloudflare, the connectivity cloud company, has announced its new Vulnerability Discovery and Remediation service, currently accessible in early access via Cloudflare Managed Defense. Developed through the OpenAI Daybreak Defense Network, the solution pairs deep code investigation and automated patch generation using OpenAI’s Daybreak models including GPT-5.6 Cyber with real-time threat intelligence harvested across Cloudflare’s global network footprint. The integrated capability allows enterprise security teams to identify high-risk software flaws and proactively deploy virtual patches at the network edge prior to exploit attempts.
Closing the Exposure Window in Modern Software Security
There is no doubt that there has been an explosion of vulnerabilities being reported for enterprise security operations. As per the data available on the National Vulnerability Database, 60,475 vulnerabilities have been recorded by September 2026. This is more than the total number of 48,185 vulnerabilities recorded in 2025.
The problem with vulnerability scanning is that it generates tons of data without considering the context of the production environment. As a result, there comes a problem where security people are not able to distinguish between actual threat and noise.
With the help of trillions of requests every day on millions of digital assets, Cloudflare analyzes its network traffic telemetry on a daily basis. This scale helps Cloudflare understand the context and find out exploit patterns at an early stage.
“If your security team is manually fighting AI-driven attacks, you’re not just burning them out you’re losing. Now, we’re shifting the defense strategy away from chasing patches one vulnerability at a time to an automated approach,” said Matthew Prince, co-founder and CEO of Cloudflare. “We built Cloudflare’s global network to analyze what’s happening across the Internet in real time. Pair that with the power of OpenAI GPT-5.6 Cyber, and you’re not just reacting to attacks anymore, you’re stopping them before they land.”
Also Read: CrowdStrike Introduces AI Partner Specialization to Secure the Agentic Enterprise Ecosystem
Context-Aware Triage and Automated Edge Mitigation
With a tight integration of AI-powered code analysis directly into its infrastructure components such as Web Application Firewall (WAF), Web Assets and Workers Observability, Cloudflare provides SOC teams with three essential capabilities:
- Threats Prioritization based on Traffic Telemetry: Analyzes real-time Internet traffic data along with vulnerability scan results from the source code, identifying critical security threats that are currently exploited in the wild.
- Fast Edge Patches: Provides SOC teams with an ability to automatically create and implement custom WAF security rules to block the exploits right away before the source code patches are developed.
- Human-Reviewed AI-Assisted Remediation: Uses OpenAI Daybreak models, which include GPT-5.6 Cyber, to generate code patches for human engineering review. To ensure operational security, all virtual WAF rules and code patches must be verified by humans prior to their implementation.
“Our goal through the OpenAI Daybreak Defense Network is to give defenders the advantage of frontier AI, safely,” said McCall McIntyre, Head of Global Cyber Partnerships at OpenAI. “We are excited to team up with Cloudflare to put proactive, AI-driven security directly into the hands of enterprise defenders.”
Availability
The Vulnerability Discovery and Remediation feature is currently available by invitation to select Cloudflare Enterprise customers through Cloudflare Managed Defense.
