OpenAI Pauses Astra AI Development Over 'Critical' Cyber Capabilities

OpenAI has paused internal development of its upcoming artificial intelligence model, Astra, after internal evaluations indicated the system may possess “critical” cybersecurity capabilities, the company disclosed on August 7, 2026. The company stated it “cannot rule out critical cyber capabilities” following assessments conducted over the past few days. Under OpenAI’s Preparedness Framework, first published in 2023, a model reaches the Critical cybersecurity threshold if it can identify and develop functional zero-day exploits of all severity levels in many hardened real-world critical systems without human intervention, or can devise and execute end-to-end novel strategies for cyberattacks against hardened targets given only a high-level desired goal. OpenAI said it will scale up testing and security measures around Astra before any release, and will slow down development until the appropriate safeguards are in place, as required by the framework. The company has started implementing stricter security controls for testing, including isolated testing environments and universal monitoring across agentic applications of Astra. OpenAI confirmed that Astra was “not involved” in the recent Hugging Face security breach. The pause marks what could be the first time a frontier AI lab has committed to slowing progress on one of its own AI models due to cyber concerns. Competing AI lab Anthropic previously committed to pausing training of powerful models if capabilities surpassed the company’s ability to control them. Anthropic released a safer version of its most cyber-capable model, Mythos, in June. The announcement comes as the Trump administration works to develop a process for evaluating AI models before their release. Select industry representatives were briefed on a framework this week, but many questions remain unanswered regarding government engagement, review timelines, and access to models. Earlier this week at the Black Hat cybersecurity conference, members of OpenAI’s technical staff said the company was slowing down testing while it works on upgrading its security practices. Michael Dalton, a member of OpenAI’s technical staff, said during a presentation that OpenAI has started “consciously slowing down research to enhance security.” Recent internal evaluations of Astra indicate “significant advancements in agentic coding and cybersecurity,” according to the company. These results, combined with expert assessments, led OpenAI to conclude that it cannot rule out critical cyber capabilities. Meta and Anthropic have also recently admitted that they had AI models that went rogue and breached other organizations. OpenAI’s decision to pause Astra development reflects growing industry concern over rapidly advancing AI cyber capabilities. The company said it has paused non-essential projects to comply with new security standards.