SentinelOne Expands Wayfinder Frontier AI Services with OpenAI Daybreak Models

SentinelOne is adding OpenAI Daybreak cyber models to Wayfinder to deliver AI-driven code risk and compromise assessments for enterprise customers.

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google Not now

Extends Wayfinder Frontier AI Services with code risk analysis, compromise assessment, and malware analysis capabilities powered by OpenAI’s latest models

MOUNTAIN VIEW, Calif.--(BUSINESS WIRE)-- SentinelOne® (NYSE: S), the AI Security leader, today announced an expanded set of offerings for Wayfinder Frontier AI Services, powered by OpenAI Daybreak models through the Daybreak Defense Network. Starting with OpenAI's GPT-5.6-Cyber, the offerings will employ the latest frontier cyber models to help customers proactively identify and remediate exploitable threats in their enterprise before nation-state and cybercriminal threat actors have a chance to capitalize on them.

Frontier AI models have made headlines for their ability to surface novel threats that traditional signatures or scanners may miss. This new reality is already changing how security teams approach exposure and patch management. But bigger lists are rarely helpful in identifying which risks are materially exploitable in a customer’s environment. What’s critical is knowing which exposures an attacker can actually reach, and closing them fast. Wayfinder Frontier AI Services are built precisely for that job, pairing frontier AI models with SentinelOne's elite offensive and defensive security experts so customers get a prioritized map and remediation guidance vs. a longer backlog.

As a longtime participant in Daybreak Defense Network, OpenAI’s cyber defense initiative, SentinelOne’s AI security and AI research teams have evaluated advanced public and private AI models against cyber tasks to understand where they can most effectively support defensive security workflows. In recent benchmarks, SentinelLABS, the AI and cyber research arm of SentinelOne, found that OpenAI’s GPT-5.6-Cyber delivered best-in-class in reverse engineering and analysis of military-grade malware, like fast16.

"Attackers are increasingly using AI to find and exploit weaknesses with greater speed and scale," said Steve Stone, Chief Customer Officer, SentinelOne. "Our job is to help close that gap for customers by putting the most advanced models available in the hands of our elite experts to home in on the areas most likely to be attacked. In our testing, OpenAI's GPT-5.6-Cyber has already proven to be exceptionally good at malware analysis, code risk assessments and other offensive cyber capabilities, making it a perfect fit for Wayfinder Frontier AI Services and our customers."

In addition to the new models, the expanded Wayfinder Frontier AI Services will deliver two new capability areas, both reinforced by shared malware analysis, detection, and validation:

AI-Powered Code Risk Analysis

• Scans a customer's repository for OWASP-class flaws, code implants, exposed secrets, and supply-chain risk at machine speed, giving customers a validated view of which vulnerabilities an attacker can actually reach.
• When a scan surfaces a suspected malicious sample, AI-assisted workflows support disassembly and deobfuscation, fusing static and sandbox evidence into an assessment of its capability, persistence, and command-and-control.
• Every verdict yields IOCs, MITRE ATT&CK mapping, and recommended detections for the fleet, validated by SentinelOne's offensive-security analysts before delivery.

AI-Enabled Compromise Assessment

• Evaluates telemetry against detection rules to surface posture gaps, including potentially risky use of VPNs and proxies, remote-management tools, and other dual-use software, replacing hours of manual review with AI-driven triage.
• When triage surfaces a suspected malicious sample, the same malware analysis capability drives disassembly, deobfuscation, and behavioral analysis to confirm what the sample does and assess its potential scope and impact.
• Customers receive a completed findings package, validated by SentinelOne's defensive security analysts, ranked by real-world exploitability.

The new capabilities will use models selected for specific security tasks, including the introduction of OpenAI's GPT-5.6-Cyber alongside SentinelOne's existing model lineup.

Wayfinder Frontier AI Services is generally available. These new capabilities and expanded model lineup, featuring OpenAI Daybreak models, are being rolled out in private preview with broader availability to follow.

About SentinelOne

SentinelOne (NYSE: S) is the leader in AI security, setting the standard for using AI and automation to give defenders a decisive operating advantage. Built for those who secure our world, its platform delivers unified coverage across endpoints, identity, cloud, and AI. Powered by Autonomous Security Intelligence, SentinelOne stops attacks at machine speed, reducing risk and delivering clarity and control to stay one step ahead. Headquartered in Mountain View, California, with teams worldwide, SentinelOne protects nearly one-fifth of the Fortune 500 and hundreds of Global 2000 enterprises. From Main Street to Wall Street, the world's most critical organizations trust SentinelOne with their security.

All third-party product names, logos, and brands mentioned in this publication are the property of their respective owners and are for identification purposes only. Use of these names, logos, and brands does not imply affiliation, endorsement, sponsorship, or association with the third party.

This press release includes forward-looking statements. Forward-looking statements are subject to risks and uncertainties, including factors beyond our control, that could cause actual performance or results to differ materially from those expressed in or suggested by the forward-looking statements. These and other risk factors are described in the “Risk Factors” section of our most recent Annual Report on Form 10-K, subsequently quarterly reports filed on Form 10-Q, and other filings made with the U.S. Securities and Exchange Commission (SEC), which are available free of charge on our website at http://investors.SentinelOne.com and on the SEC’s website at www.sec.gov.

You are cautioned not to place undue reliance on these forward-looking statements. Any future products, functionality and services may be abandoned or delayed, and as such, you should make decisions to purchase products and services based on features that are currently available.

Any forward-looking statements made in this document are based on our beliefs and assumptions that we believe to be reasonable as of the date hereof. You should not rely upon forward-looking statements as predictions of future events. Except to the extent required by law, we undertake no obligation to update these forward-looking statements to reflect new information or future events.

Category: Investors

View source version on businesswire.com: https://www.businesswire.com/news/home/20260903921861/en/

Media Contact
Regan DePinto
press@sentinelone.com

Source: SentinelOne

Key Terms

deobfuscation technical

Deobfuscation is the process of reversing or removing deliberate hiding or scrambling of information so the original data, code, or meaning becomes clear again. For investors, it matters because companies, software, or communications that were intentionally obscured — for example to hide code behavior, revenue sources, or ownership links — can be revealed through deobfuscation, affecting assessments of risk, compliance, and value. Think of it as untangling a knotted string to see where it really leads.

mitre att&ck technical

A publicly maintained catalog of common hacker behaviors and techniques used against computer systems, organized like a playbook that maps how attacks typically unfold. Investors care because it helps companies test and explain their cyber defenses, prioritize security spending, and gauge operational risk—similar to an emergency drill revealing weak exits before a real crisis. Use of the framework can indicate more mature cybersecurity practices and clearer disclosure of cyber risk.

command-and-control technical

"Command-and-control" describes a system where authority is centralized, and decisions are made by a single leader or a small group that directs how activities are carried out. In financial or organizational contexts, it means strict oversight and top-down management, leaving little room for individual discretion. For investors, it highlights how power and decision-making influence the stability, efficiency, and flexibility of an organization or market.