CrowdStrike puts GPT-5.6 Cyber into Falcon

CrowdStrike said on Wednesday that it will run OpenAI’s GPT-5.6 Cyber inside a purpose-built cyber harness. That word is doing a great deal of work. It is also the word that made this week’s other cybersecurity story alarming.

The expanded OpenAI partnership, announced at the company’s Fal.Con conference in Las Vegas, has two halves. CrowdStrike will police OpenAI’s Codex agents at runtime. It will also put OpenAI’s cyber-tuned model to work assessing risk for customers.

Why the word matters

A day earlier we reported Booz Allen’s Cyber Weapon Index. It tested 18 models as autonomous attackers against a live network. Its third finding was that an attack harness can matter as much as the model itself, or more. A harness is the software that connects a model to tools and keeps it on task.

Booz Allen demonstrated the effect bluntly. Claude Sonnet 5 finished 15th of 18 on a score of 13. Fitted with a harness, the firm says, it rivalled the leader on 80. The report’s conclusion was that the model is no longer the unit of risk, and the system is.

CrowdStrike is now selling that same architecture pointed the other way. Its Frontier AI Readiness and Resilience service applies GPT-5.6 Cyber “within CrowdStrike’s purpose-built cyber harness”. The stated jobs are assessing risk, analysing attack paths and setting remediation priorities. The company says this happens under human oversight, and for approved defensive use only.