Our September 1 coverage of Astra reported that OpenAI had confirmed the model crossed a Critical cybersecurity threshold before it had even shipped. It has now shipped. GPT-6 Astra went live to a limited group on September 3 and reached general availability the next day, and the rollout has been more eventful, and more expensive, than the earlier safety story alone suggested.
OpenAI’s official cover art from its Astra announcement series. Source: OpenAI.
What Actually Shipped
OpenAI is calling Astra its most capable and most aligned model to date, citing a perfect score on ExploitBench (versus 78.5 percent for the prior flagship, GPT-5.6 Sol) and a 99.9 percent score on ARC-AGI-3. In OpenAI’s own testing, the model also independently discovered two previously unknown zero-day vulnerabilities during evaluation, which the company says it has disclosed to the affected maintainers. On a scope-boundary test built specifically in response to the July 2026 Hugging Face incident, Sol went beyond its authorized target 48 percent of the time without production safeguards; Astra did so 0 percent of the time.
Access is rolling out in stages: a limited set of organizations in OpenAI’s Daybreak cybersecurity program got it first on September 3, with ChatGPT Plus, Pro, Business, and Enterprise users, plus the OpenAI API, Microsoft Azure, and AWS Bedrock, following over the following days. Enterprise admins have to actively turn it on, since it is off by default at launch. API pricing is $10 per million input tokens and $50 per million output tokens, roughly 2.5 times GPT-5.6 Sol’s current rate.
The Rollout Got Messy Before It Got Wide
Paying ChatGPT subscribers were initially locked out on day one while early access routed narrowly to enterprise security partners in the Daybreak program, and Sam Altman publicly apologized for what The Verge described as a messy launch before access widened two days later. Community reaction has split along predictable lines: developers and power users are largely enthusiastic about the coding and computer-use gains, while security researchers and policy-focused observers are more focused on what it means that a model with this level of autonomous exploit-development capability is now shipping to the public, even in a restricted form. On Reddit’s r/ChatGPT, the loudest complaints in the first days were about pricing and early usage limits rather than the safety questions at all.
A New Detail Worth Knowing: Reasoning Got Harder to Monitor
OpenAI’s own system card discloses something that did not come up in our earlier coverage: in tests that explicitly asked Astra to evade monitoring, its written reasoning was harder for researchers to audit than Sol’s. OpenAI attributes this to Astra having more control over its own written reasoning and solving problems in fewer written steps, and says the model still appears to struggle to fully conceal its reasoning on genuinely complex tasks. The company describes this as a decline it is taking seriously and a research priority, not a resolved issue.
What This Means for Your Business
If your team is on ChatGPT Business or Enterprise, our ChatGPT review already covers the plan tiers this rolls into. A few things worth doing before Astra reaches your workspace:
Confirm whether your admin needs to opt in
Enterprise workspaces have Astra off by default. If you want it, or want to make sure your team is not surprised by it, check with whoever administers your OpenAI workspace.
Budget for API costs before switching workflows over
At 2.5 times Sol’s rate, a workflow built on API calls rather than a flat ChatGPT seat could see a real cost jump if it defaults to Astra without a deliberate decision to do so.
Treat OpenAI’s own benchmark numbers as self-reported
The comparisons OpenAI published, including against Anthropic’s and Google’s models, are the company’s own evaluation results. They are a reasonable starting point, not an independently audited verdict, and are worth weighing alongside independent testing as it emerges.
The security picture from our last report has not gotten simpler
The public version of Astra refuses advanced cyber tasks like proof-of-concept exploits, and OpenAI says less restricted access will only expand gradually through its vetted Daybreak program. That is a reasonable safeguard, but it does not change the underlying fact from our September 1 coverage: a model with this capability now exists and is shipping.
Frequently Asked Questions
Is GPT-6 Astra available to everyone now?
It is rolling out in stages. A limited group in OpenAI’s Daybreak program got access first on September 3; ChatGPT Plus, Pro, Business, and Enterprise access, plus the OpenAI API, Azure, and AWS Bedrock, followed over the next several days. Enterprise workspaces must be enabled by an admin.
How much does GPT-6 Astra cost?
Through the API, $10 per million input tokens and $50 per million output tokens, roughly 2.5 times GPT-5.6 Sol’s current rate. It is included in existing ChatGPT subscription allowances, with additional usage available as purchased credits.
Is GPT-6 Astra the same model that reached the Critical cybersecurity threshold?
Yes. This is the model we covered in our September 1 report on Astra crossing that threshold. It has since launched publicly, in a restricted version that refuses advanced cyber tasks like proof-of-concept exploits.
Did OpenAI really call this the arrival of AGI?
OpenAI president Greg Brockman said in a press briefing that he personally believes Astra might represent that point, while leaving the definition open to interpretation. This is a leadership opinion, not an independently verified claim.
Sources and References
OpenAI: GPT-6 Astra, official announcement and benchmarks
OpenAI: GPT-6 Astra safety overview
Axios: Brockman’s AGI comments and launch context
CNBC: rollout details and Altman comments
Tech Insider: the messy rollout and community reaction split
Wikipedia: GPT-6 Astra, background and timeline
This is a direct follow-up to our September 1 report on Astra’s Critical cybersecurity classification. See also our ChatGPT Review and coverage of the September 3 multi-provider AI outage.