Check Point is using OpenAI Daybreak to compress its vulnerability-research workflow from hours into minutes, allowing analysts to convert vulnerability intelligence into customer protections more quickly. Jonathan Zanger, Chief Technology Officer of Check Point, says Daybreak provides access to OpenAI’s frontier cyber models, which can analyze vulnerabilities, reason about attack paths, and spot gaps in code and configurations.
Why this matters for Check Point
Check Point secures more than 100,000 organizations through its AI, workspace, cloud, and network security offerings. Check Point Research provides the company’s prevention-first approach with vulnerability-research expertise, investigating emerging issues and translating findings into protections for customers. Daybreak shortens the time between understanding a vulnerability and developing a defensive measure.
Changes to the workflow
Previously, expert analysts performed the bulk of vulnerability investigation work: determining how a flaw could be exploited and turning findings into signatures or indicators of compromise that Check Point’s systems use to detect threats. That capacity was limited by the number of available analysts.
By adopting Daybreak, Check Point automates and accelerates much of this workflow. "We leverage Daybreak to speed up and automate this process, and we can now do it in minutes instead of hours," Zanger says. The main benefit comes from the models’ ability to reason about security problems. Zanger also highlights improvements in the models’ understanding of complex code and configurations and in identifying potential exposure points.
For vulnerability research, Daybreak supports the investigative steps that feed the creation of a signature or indicator of compromise, providing analysts with a faster route from threat understanding to protection development.
Orchestration with human oversight
Check Point is also collaborating with OpenAI to build an Agentic Network Security Orchestration solution that relies on Daybreak. According to Zanger, this approach would combine continuous monitoring of customer environments with clearly defined operating boundaries and require human approval for consequential actions. Customers would set security objectives, and the system would explain its findings, recommended actions, and associated risks so customers can decide how to proceed.
Next priority: speeding remediation
With vulnerability research reduced to minutes, Check Point’s next focus is on remediation. The company aims to use Daybreak’s capabilities to make it easier for security teams to address the gaps they identify.
Impact for customers
Faster research enables quicker development of protections against newly discovered vulnerabilities. Check Point intends to extend this progress toward more autonomous defenses, while keeping customers in control of security objectives and requiring human approval for important actions.
