OpenAI Provides Free AI Cyber Defence Tool to Ukraine Government
The transfer of a commercial AI security platform to a wartime government marks a notable expansion of private-sector involvement in national infrastructure protection.
OpenAI has agreed to provide the Ukrainian government with free access to its AI-powered cyber defence system, called Daybreak, to help protect civilian infrastructure including hospitals and power plants from cyber-attacks, according to a BBC News report published September 23, 2026.
The scale of the threat facing Ukraine's digital infrastructure is substantial. According to the Computer Emergency Response Team of Ukraine (CERT-UA), the national cyber incident response body, Ukraine recorded nearly 6,000 cyber-attacks in 2025 alone. CERT-UA serves as the official government body responsible for coordinating responses to cyber incidents across Ukrainian state systems.
Daybreak is OpenAI's cyber defence platform designed to detect, analyze, and respond to malicious digital activity. The precise technical capabilities of the system, including which infrastructure categories it is optimized to protect and whether human analysts remain in the response loop, have not been fully detailed in publicly available materials as of this report.
The arrangement represents a direct business-to-government transfer of AI security tooling outside a commercial contract. Whether any formal agreement, memorandum of understanding, or legal framework governs the transfer has not been disclosed by either OpenAI or the Ukrainian government in documents available at the time of publication.
Civilian infrastructure, including electrical grids and medical facilities, has been a documented target of cyber operations during the Russia-Ukraine conflict. The Kyiv-based Cybersecurity Situation Center and CERT-UA have previously attributed a portion of those attacks to Russian state-affiliated actors, though attribution for individual incidents varies in confidence level.
OpenAI, headquartered in San Francisco, is a private company that has previously announced policies restricting the use of its AI systems for military weapons development. Providing defensive cyber tools to a government engaged in active armed conflict represents a distinct category of activity. The company has not issued a detailed public statement explaining how this transfer fits within its published use policies, as of September 23, 2026.
The move reflects a broader pattern in which major technology companies have provided services or equipment to Ukraine since the Russian invasion began in February 2022. Microsoft, for example, has previously disclosed threat intelligence sharing and cloud migration assistance for Ukrainian government data, as reported by Microsoft's own Digital Defense Reports from 2022 through 2024.
The decision to offer the tool at no cost raises questions about the sustainability and scope of the arrangement. Whether Daybreak will be deployed by Ukrainian technical staff independently, or whether OpenAI personnel will be involved in operations or maintenance, remains unknown. The terms under which the free provision might end or be renegotiated are also not publicly documented.
For Ukraine, the significance lies in the volume and targeting pattern of attacks. CERT-UA's recorded figure of nearly 6,000 incidents in 2025 averages to more than 16 attacks per day across government and critical infrastructure networks. Attacks on power infrastructure in particular have had documented effects on civilian populations during winter months, as reported by the International Energy Agency in its 2025 Ukraine energy assessments.
The United Nations General Assembly is currently meeting in New York, with Ukrainian President Volodymyr Zelenskyy scheduled to address member states on September 23, 2026, according to Al Jazeera's live coverage. Cyber defence and infrastructure protection are expected to be among the issues Ukraine raises in diplomatic sessions this week, though the formal agenda has not been published in full.
What would clarify the full picture of this arrangement is a public agreement between OpenAI and Ukraine's government specifying the duration, scope, data-sharing provisions, and operational responsibilities attached to the Daybreak deployment.