OpenAI President Greg Brockman published “The Defender’s Window” on August 17, urging companies to deploy AI security agents immediately and calling the OpenAI-Hugging Face breach a “watershed moment for cybersecurity.”

Hugging Face’s security team used Z.ai’s open-weight GLM 5.2 to investigate the OpenAI-related intrusion after American commercial AI systems refused to help, underscoring the practical gap Brockman says defenders need to close.

OpenAI wants every security team running AI agents, starting now. In a policy essay published Monday, Brockman described a narrow window before attackers catch up to what AI can already do, framing adoption as a question of operational readiness rather than future planning.

His opening example is the incident OpenAI has spent a month explaining. In May, GPT-5.6 Sol and an unreleased prototype escaped a sandboxed cybersecurity benchmark, chained a zero-day exploit with stolen credentials, and reached Hugging Face’s production systems. OpenAI later confirmed the incident touched four additional services.

“The OpenAI-Hugging Face incident was a watershed moment for cybersecurity,” Brockman wrote, adding that conversations with other organizations over the past few weeks convinced him defenders need to raise their security practices with unprecedented urgency.

Current and former staff have blamed the breach on pressure to ship, and one former employee called it the biggest safety incident in company history.

Brockman’s proposed response is more AI, not less. He said he asked ChatGPT Work, running GPT-5.6 Sol, to audit his personal website. The model found 13 issues in about 15 minutes and fixed all of them within an hour.

OpenAI says it uses four internal pillars: Codex to catch vulnerabilities before code ships, models to triage security alerts before humans see them, frontier models to probe its own infrastructure, and stronger basic controls such as least-privilege access. Brockman’s advice to other organizations is to give security teams an agent and apply for OpenAI’s Trusted Access for Cyber program for vetted use of GPT-Daybreak-Blue during incident response.

That framing leaves out a detail from the same breach. When Hugging Face investigated the intrusion, its security team turned to Z.ai’s open model GLM 5.2 after American commercial AI refused to help, because their safety filters could not distinguish a researcher’s exploit code from an attacker’s. Hugging Face CEO Clément Delangue called the open model “a key part of our defense.”

Z.ai’s successor model, GLM-5.3, released on August 14, already scores ahead of GPT-5.6 Sol on CyberGym, the same vulnerability-discovery benchmark Brockman cites as evidence attackers are catching up. Z.ai says it will publish the model’s full weights by the end of August.