# OpenAI restricts GPT-6 Astra’s cyber access by default for IT admins

Digest AI · Enterprise & Industry · published 2026-09-27T23:10:00Z

Canonical: https://digestai.news/story/openai-restricts-gpt-6-astras-cyber-access-by-default-for-it-admins

## Summary

OpenAI’s GPT-6 Astra model can identify unknown security flaws and build exploit chains with minimal human input, according to the company’s September 3 safety overview. The model is off by default in eligible Enterprise and Edu workspaces, with IT administrators controlling access via role-based permissions. Admins can also restrict Astra’s interactions with websites, apps, uploads, and browsing history, though overlapping roles may unintentionally grant access to users.

## Key points

- GPT-6 Astra can find unknown security flaws and chain exploits without constant human oversight, OpenAI says
- Access is off by default in Enterprise and Edu workspaces, with IT admins enabling it per role or group
- Advanced defensive workflows require separate Trusted Access approval, not standard workspace toggles

## Why it matters

Astra’s automated exploit-building could accelerate offensive cybersecurity testing but risks misuse if misconfigured. Admins must manually manage permissions to prevent unintended access, complicating enterprise deployments.

## Sources

1. [Your Company Can Turn On GPT-6 Astra: Here's What IT Admins Can and Can't Control](https://ibtimes.sg/your-company-can-turn-gpt-6-astra-heres-what-it-admins-can-cant-control-94359) (ibtimes.sg, 2026-09-27)

Part of the developing story: [OpenAI Tightens Cyber Controls On New GPT Models](https://digestai.news/thread/openai-to-preview-gpt-6-cyber-model-and-cybersecurity-tools) (2 stories)

## Cite

Digest AI, "OpenAI restricts GPT-6 Astra’s cyber access by default for IT admins", 27 September 2026, https://digestai.news/story/openai-restricts-gpt-6-astras-cyber-access-by-default-for-it-admins

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/openai-restricts-gpt-6-astras-cyber-access-by-default-for-it-admins.json