Check Point co-signs a cyber defense letter whose only named product belongs to OpenAI
A vendor coalition has formed around OpenAI's call for a surge in cyber defense. What an underfunded defender can actually requisition from it today is one subsidized model tier, on terms the letter does not state.
The Watch · Security desk
What happened
- Check Point publicly backed OpenAI's call for collective action on cyber defense and published the full open letter in its own blog post, alongside other technology and cybersecurity organizations.
- The letter says there is a short window to strengthen defenses and that AI-enabled attacks will become far more widespread and sophisticated in the coming months, powered by models from many companies.
- Security vendors are asked to make vulnerability finding, code scanning, monitoring, expedited remediation, red teaming and incident response tooling widely accessible, including to defenders with limited budgets.
- OpenAI's listed first step is subsidized access to its latest Daybreak Cyber models for eligible public-sector bodies, nonprofits, open-source maintainers, critical infrastructure and essential-service operators.
Why it matters
- What it limits constraint A defender with no budget cannot plan around an offer with no price and no eligibility test, so the coalition changes nothing in the quarter it was announced.
- Who's exposed exposure The letter names hospitals and water treatment plants as soon at risk, and those are the operators least able to buy the tooling it describes, which leaves their exposure resting on other companies' discount decisions.
- What's now possible capability The Daybreak Partners route, if it runs as described, would put frontier-model access attempts and private weakness reporting in reach of organizations that cannot staff a red team.
- Who has to decide decision Each signatory now has a visible choice to make: publish terms for cheaper defensive tooling, or be read as having endorsed a document that asks everyone else to spend.
Next story · Security · Oct 8
Anthropic pairs Claude with CrowdStrike and Dragos in a critical infrastructure defense programConfirmed9 publishers
The letter's own arithmetic answers the operator question. Six tool categories are named in the section addressed to security vendors, and in the text Check Point published none of the six carries a price, a tier, a date, or a named product [14]. Four constituencies are addressed, and only the frontier lab section names a signatory's own deliverable [12]. That deliverable is subsidized access, and the letter as quoted leaves "eligible" undefined, leaves the buyer's remaining cost unstated, and gives no start date [15].
The grading is uneven in the same direction. Governments are handed three specific measures of progress; the cybersecurity companies and technology partners get none, only a request to share threat information, playbooks and expertise [13]. A vendor signatory can satisfy its section with a blog post, while a water utility's section calls for tested recovery plans and closed attack paths, work no blog post covers.
The document states two different timelines for the threat. Check Point Research says it is already uncovering AI-powered attacks in the wild, with actors operating at greater scale and growing sophistication [5]. The letter it endorses puts the escalation in the coming months and calls the present a short window [1]. Neither is dated, and the gap is operational rather than rhetorical: activity already in the wild is a remediation problem this quarter, while a months-out escalation is a line in next year's budget. The letter's first principle argues for the earlier reading. It says the weaknesses already exist, naming longstanding bugs, excessive permissions, misconfigurations and legacy systems, against security teams it describes as historically under-resourced [3].
Then there is the section addressed to everybody, which asks organizations to identify the systems and services they depend on, assign accountable owners, put capable AI into approved security workflows, strengthen access controls, test recovery from protected backups, and keep people responsible for consequential decisions [10]. That is work operators already owned, at the price they already paid. The new element sitting on top of it is a paragraph promising that frontier cyber tooling will reach defenders who cannot pay list.
What to watch
- Published eligibility criteria and pricing for subsidized Daybreak Cyber access would turn the letter's one deliverable into something a nonprofit can apply for.
- A named roster of authorized Daybreak Partners, with scope rules for agreed access attempts, would show whether controlled testing reaches operators outside large vendors.
- Any signatory posting a free or discounted tier for the six tool categories, with terms attached, separates a coalition from a co-signature list.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence55
- Adoption15
- Hype gap+40
- Incentives72
- Confidence62
Perspective Coverage
5 publishers- Builder
- Builder 25%
- Operator
- Operator 48%
- Investor
- Investor 27%
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
The open letter states that there is a short window to strengthen cyber defenses and that in the coming months AI-enabled attacks will become far more widespread and sophisticated, powered by models developed by many companies around the world.
- [2]
The letter says the companies and public services communities depend on, from hospitals to water treatment plants, will soon be at risk.
- [3]
The letter's first principle states that the weaknesses already exist, citing longstanding bugs, excessive permissions, misconfigurations and legacy systems, and says security teams have been historically under-resourced and need a surge in tools and resources.
- [4]
Check Point said it is proud to support OpenAI's call for collective action on cyber defense, alongside organizations across the technology and cybersecurity ecosystem, and published the open letter in its own blog post.
- [5]
Check Point Research says it is already uncovering AI-powered attacks in the wild, revealing threat actors operating at greater scale and with growing sophistication.
- [6]
The letter's section for cybersecurity companies and technology partners asks them to make solutions such as vulnerability finding, code-scanning, monitoring, expedited remediation, red teaming and incident-response tools widely accessible to defenders including those with limited budgets, to share threat information, practical playbooks and expertise, and to pair tools and findings with hands-on help to deploy and verify fixes.
- [7]
The letter's government section asks governments to measure progress by dangerous attack paths closed, fixes verified, and recovery plans tested.
- [8]
The frontier labs section asks labs to expand access to cyber models, contribute funding and deployment capacity, and share credible threat assessments; OpenAI says it is starting by providing subsidized access to its latest Daybreak Cyber models to eligible public-sector organizations, nonprofits, open-source maintainers, critical infrastructure and essential-service operators.
- [9]
OpenAI recommends that companies work with authorized Daybreak Partners to make controlled attempts to access agreed systems using Daybreak models and privately share any weaknesses found with the company's security team.
- [10]
The section addressed to every organization asks them to identify the systems and services they depend on, assign accountable owners with resources, put capable AI into approved security workflows to find and prioritize weaknesses, strengthen access controls, test recovery from protected backups, and expand automation while keeping people responsible for consequential decisions.
- [11]
The letter's call for immediate action is divided into four numbered sections: every organization; cybersecurity companies and technology partners; governments; and frontier labs.
- [12]
Of the four constituencies the letter addresses, only the frontier labs section names a signatory's own concrete commitments, which are OpenAI's.
- [13]
The letter gives governments three named measures of progress and gives cybersecurity companies and technology partners none.
- [14]
Six tool categories are named in the section for cybersecurity companies, and none of them is attached to a price, a tier, a date, or a named product anywhere in the letter text as published.
- [15]
OpenAI's model offer is described as subsidized rather than free, and the letter as reproduced by Check Point states no price, no eligibility criteria and no start date for it.
Sources
5 independent publishers whose own reporting we read for this story.
- blog.checkpoint.comCheck Point Supports OpenAI’s Call for Collective Action on Cyber Defense
1 article · August 27, 2026
- cyberscoop.com100-plus companies call for ‘global surge’ in AI-powered cyber defense
2 articles · August 27, 2026
- infosecurity-magazine.comWindow to Tackle Surge in AI-Enabled Cyber Attacks Narrowing, Tech Giants Warn
2 articles · August 28, 2026
- nakedsecurity.sophos.comA call for collective action on cyber defense
1 article · August 26, 2026
- securityweek.comTech, Cybersecurity Giants Unite Behind OpenAI-Led Cyber Defense Pledge
2 articles · August 28, 2026
Topics and entities
Topics
- Critical infrastructure security
- AI for Cyber Defense
- AI-Enabled Cyberattacks