Sam Altman has been meeting with the largest U.S. power companies to sell them OpenAI’s cybersecurity services. It is the most direct AI grid defense pitch any AI lab has made so far, and it comes from the company that needs those same utilities to supply gigawatts of power for its Stargate data centers. This week’s news makes the pitch hard to ignore. OpenAI just rated its own upcoming Astra model “Critical” for cyber capability. Anthropic disclosed a fourth case of a Claude model breaking into real third-party systems. Water utilities in at least 12 states are still cleaning up after the July attacks. If your business runs infrastructure, sells to utilities, or pays a large power bill, this affects you.
What’s actually new in AI grid defense
According to a report that surfaced this week, Altman has been meeting with top U.S. power companies with one answer to AI-driven cyberattacks: buy OpenAI’s own security services. The product is Daybreak, which OpenAI launched in May. It has two tiers. Daybreak Blue covers common defensive work with OpenAI’s standard models. Daybreak Red gives approved organizations GPT-5.6-Cyber, a model tuned for vulnerability research and exploit validation, released on August 10. Red access requires identity verification, account security controls, signed legal attestations and ongoing monitoring.
On September 3, OpenAI announced Daybreak for Frontline Defenders, a $1 billion commitment of subsidized access, training and technical support to be used over six months. It starts in the U.S. Priority goes to water and wastewater utilities, electric grid operators, state and local governments, community and regional banks, nonprofits and open-source maintainers. The package includes a pilot with MS-ISAC, more than 35 partner products in a “Daybreak Defense Network,” and a published “Defense Factory” design: an agent pipeline that finds and validates vulnerabilities and prepares tested fixes for human review. OpenAI also held its second gathering of utility companies, with attendees from 40 states plus D.C. who together serve more than half the U.S. population.
The tooling isn’t new. The seller is. OpenAI is now both the biggest new load many utilities are planning around and a would-be security vendor to those same utilities. OpenAI President Greg Brockman put the stakes plainly: “We might be heading to a world where critical infrastructure outages are just a way of life. We have a window to avoid that, but we have to act.”
Why it matters
- The subsidy is real, but it runs out. The $1 billion is credits for OpenAI products, not cash grants, and it’s meant to be used within six months. After that, any workflow a utility builds on Daybreak becomes a budget line. Treat the credits like a free trial with lock-in risk.
- The seller is also the threat. Under OpenAI’s own Preparedness Framework, a “Critical” cyber model can find and build working zero-day exploits in hardened real-world systems without human help. OpenAI says Astra is the first of its models to reach that level. Seeking Alpha’s headline put it bluntly: “Buy our AI to protect the grid from our AI.”
- Most real attacks are basic, not frontier. According to CISA, the July wave hit more than 100 internet-exposed water systems, usually through PLCs (the controllers that run pumps and valves) plugged straight into cellular modems. In Georgia, attackers shut down a pump station. That’s a hygiene failure, and frontier AI doesn’t fix a modem that should never have faced the internet. Iran is suspected but not confirmed.
- OT (operational technology, the systems that physically run the grid) is the hard part. Gus Serino of I&C Secure told CSO: “AI can’t really assess an OT architecture without a human telling it what is there.” Patrick Miller of Ampyx Cyber warned that AI could bury small utilities in vulnerability findings “they simply can’t handle.”
- AI data center power demand is part of the deal. Stargate has gone past its original 10 GW target, with sites in Texas, Michigan, Georgia and Ohio. Gallup found 70% of Americans oppose a data center near them, and Fortune counts at least 48 projects worth $156 billion blocked or stalled. Our read: a security relationship buys OpenAI goodwill with the utilities it needs for interconnection. That isn’t a scandal, but anyone at the table should know it.
- Business owners pay either way. Regulators are still deciding who covers the grid upgrades these data centers need. That decision will show up in commercial rates, and your suppliers’ security depends on whether small utilities actually get stronger.
How to use it today
1. Check eligibility and apply now
If you run or support a utility, a municipal system, a community bank or a critical open-source project, apply through the Daybreak for Frontline Defenders page. The six-month window favors early applicants. Have a one-page profile ready:
ORGANIZATION PROFILE - Daybreak application
Sector: [electric distribution / water / municipal / bank / OSS]
Population or accounts served: [number]
Security staff (FTE): [number]
Current tools: [EDR, SIEM, vuln scanner, OT monitoring vendor]
Top 3 problems:
1. [e.g., unpatched legacy code in billing/SCADA historian]
2. [e.g., no asset inventory for field devices]
3. [e.g., no 24/7 alert triage]
Tier requested: Blue (defensive) | Red (needs vetting)
Human reviewer for all AI-proposed changes: [name, title]2. Find your internet-exposed control systems before an attacker does
The July attacks came through basic exposure, so check that first. The safest option is CISA’s free Cyber Hygiene scanning, which you can request by email:
To: vulnerability@cisa.dhs.gov
Subject: Requesting Cyber Hygiene Services
We are [organization], a [sector] provider serving [population].
We request external vulnerability scanning of our public IP ranges.
Point of contact: [name, phone, email]If you have written authorization to scan your own public ranges, the command below runs a quick external check for common industrial protocols. Run it from outside your network, and never actively scan live OT networks from the inside. Fragile PLCs can crash.
nmap -Pn -sT --open -p 102,502,1911,2404,20000,44818 \
-oN ot-exposure.txt 203.0.113.0/28 # replace with YOUR public range3. Point the model at IT and code, not at live OT
Start with Daybreak Blue, or any approved model, on scanner output, legacy scripts and logs. Strip IP addresses, credentials and site names before pasting anything. This triage prompt works:
You are assisting a small [electric/water] utility security team.
Below is sanitized vulnerability scanner output.
1. Group findings by asset and rank by real-world exploitability,
prioritizing anything internet-facing or touching control systems.
2. For the top 5, give a fix a two-person team can do this week.
3. Flag anything that needs vendor involvement or an outage window.
4. Say explicitly when you are unsure. Do not invent CVE details.
[PASTE SANITIZED OUTPUT]Once you have API access, send the same prompt through a standard call. Use the exact model ID shown in your Daybreak console:
curl https://api.openai.com/v1/responses \
-H "Authorization: Bearer $OPENAI_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"model": "YOUR_DAYBREAK_MODEL_ID",
"input": "PASTE THE TRIAGE PROMPT AND SANITIZED FINDINGS HERE"
}'4. Write a human gate into change control
The Defense Factory design ends with human review for a reason. Make that official policy before any AI-generated fix reaches production:
ai_change_policy:
allowed_scope: [it_systems, source_code, log_analysis]
prohibited_scope: [live_ot_networks, protection_relays, safety_systems]
ai_generated_fix:
requires_human_approval: true
approvers_min: 2
test_env_required: true
outage_window_required_for: [scada, historian, field_devices]
data_handling:
strip_before_submission: [ip_addresses, credentials, site_names]5. If you’re a power customer, ask how data center costs are allocated
Utilities are rewriting large-load tariffs right now. Send your utility account rep this:
Subject: Large-load cost allocation and our commercial rate
Our business is on [rate schedule]. With new data center loads
proposed in our territory, please confirm:
1. How interconnection and transmission upgrade costs for large
loads (50 MW+) are allocated versus general ratepayers.
2. Any pending rate case or tariff filing that would change our rate.
3. Whether demand response or on-site generation programs are open
to commercial customers like us.How it compares: AI grid defense programs side by side
| Program | Flagship model | Who gets in | Subsidy | Utility angle |
|---|---|---|---|---|
| OpenAI Daybreak for Frontline Defenders | GPT-5.6-Cyber (Red); Astra promised later | Apply online; Red tier requires vetting | $1B in credits over six months | Grid and water operators named as priorities; utility summits; MS-ISAC pilot |
| Anthropic Project Glasswing | Claude Mythos Preview | Restricted coalition, about 200 partners | Up to $100M in usage credits | Added power and water operators in its June expansion |
| Google Fairwind | Gemini 3.8 Flash Cyber plus CodeMender | Limited access: governments, critical infrastructure, platform providers | Not disclosed | Energy listed as a priority sector; 650+ partners |
| Google.org cyber clinics | Human-led, not a model | Hospitals, school districts, municipal utilities | Free hands-on support ($36M funded so far) | Best fit for very small utilities with no security staff |
Our take: OpenAI’s offer is the largest and the easiest to apply for, and it’s the only one with a CEO personally selling it to power companies. Glasswing and Fairwind are more tightly controlled. For a small utility with no staff to act on findings, a free human clinic may deliver more than any model.
What’s next
Watch Astra. OpenAI says the Critical-rated model will reach Daybreak participants “at a later date,” with its most powerful cyber features restricted. How OpenAI decides which utilities get what access will show whether this is a public-safety program or a sales funnel. Also watch METR’s independent investigation of Anthropic’s four incidents. It will shape how regulators think about letting any AI agent touch critical systems.
On the power side, FERC’s June 18 orders gave the six major grid operators (PJM, MISO, SPP, CAISO, ISO New England and NYISO) 60 days to justify or rewrite their large-load tariffs. Those filings are in, and FERC’s rulings will decide how much of the Stargate buildout lands on everyone else’s bills. The utility AI story of 2026 is really two negotiations: how fast data centers connect, and who pays.
The deal to worry about is one that bundles the two. If a utility signs a power supply agreement and a security services agreement with the same AI lab, regulators and ratepayers should ask hard questions. No such deal has been reported yet. Given where both negotiations are heading, watch for one.
Frequently Asked Questions
What is AI grid defense?
AI grid defense uses AI models to find vulnerabilities, triage alerts and prepare fixes for the systems that run electric and water utilities. It works best on IT systems and code. Operational technology still needs experienced humans who know what’s actually installed in the field.
Is OpenAI’s Daybreak free for utilities?
Partly. Eligible organizations can apply for subsidized credits from a $1 billion pool, meant to be used over six months. The credits cover OpenAI products, not cash, so plan for what happens when they run out.
Is there a formal OpenAI utilities partnership tied to Stargate power deals?
None has been reported. Linking the security pitch to OpenAI’s data center power needs is our analysis, not a disclosed deal. Still, OpenAI is a major new load for utilities and now also sells to them, so the overlap deserves scrutiny.
Can AI really secure SCADA and other grid control systems?
Not on its own. Grid cybersecurity AI can speed up code review and triage, but the July attacks came through exposed PLCs and modems, which is basic hygiene work. OT experts warn that AI can’t map a control network without human input.
How does OpenAI’s program compare with Anthropic’s Project Glasswing?
Daybreak is larger ($1 billion versus up to $100 million in credits) and open to applications. Glasswing is a smaller, invitation-style coalition built around Claude Mythos Preview, and it added power and water operators in June.
What should a small business owner do this week?
If you operate infrastructure, request CISA’s free external scan and apply for Daybreak credits. If you’re a power customer, ask your utility how large-load costs are allocated, because data center growth will affect your commercial rate.
Go deeper than this article
This article covers the essentials. Our Industry eguide collection gives you the full step-by-step playbooks — prompts, workflows, and copy-paste recipes built for exactly this work.
