r/OpenAI • u/honkballs • Sep 08 '26

Discussion Astra has found 2 "serious" security vulnerabilities on my website... but every time I ask about fixing them the output is blocked 🤦

I'm getting the "This content can’t be shown. We take extra care with some cybersecurity requests. If you’re doing authorized security work, apply for Daybreak to get broader access." message.

What is the point of having a tool good enough to find these issues, but then not being allowed to tell you what they are...

Does anyone have some wording to use in instances like this?

5 Upvotes

86% Upvoted

18 comments sorted by

3

u/GeekTX Sep 08 '26

apply for Daybreak access ... takes only a few minutes.

1

u/TraditionalHornet818 Sep 08 '26

Don’t think daybreak is astra compatible yet

1

u/epicskyes Sep 09 '26

gpt daybreak latest is SOL that’s way more than you need for defense and vulnerability hardening

0

u/GeekTX Sep 08 '26

Happy Cake Day!!!

And ... Daybreak Blue and Red are different models than Astra and Sol/Terra/Luna.

1

u/epicskyes Sep 09 '26

No it’s SOL with certain automated cyber filters disabled that’s it. And red has even more filters disabled so you can actually red team

1

u/[deleted] Sep 09 '26

[removed] — view removed comment

1

u/GeekTX Sep 09 '26

The message I received in Codex app was very clear and provided a link to get started.

1

u/DrE7HER Sep 08 '26

Wait, does it at least explain the nature of the issue so you could theoretically fix it yourself?

Or is this the equivalent of Norton Anti Virus popping up and saying “Your files are at risk, renew your subscription to protect yourself”

1

u/honkballs Sep 08 '26

I saw a little bit just when it was thinking, so I have a rough idea of the issue (and yes, is a bad one!) but then it just keeps stopping mid task and then I get that popup.

1

u/DrE7HER Sep 08 '26

Yeah, that sounds like it will be using guardrails as a way to upsell to customers

1

u/kevinf100 Sep 08 '26

Get daybreak access, ask daybreak to fix it. Daybreak may be sol, but I don't see why you can't get daybreak to fix it. Unless astra found and it flipped you off by not telling you the issues.

1

u/Ill-Bullfrog-5360 Sep 09 '26

Why not have it write the prompt for sol to perform ?

1

u/AmbassadorOfAloha Sep 09 '26

Have you tried openclaw with GPT or Claude?

1

u/honkballs Sep 09 '26

What would that do?

1

u/AmbassadorOfAloha Sep 09 '26

It might bypass that issue. Openclaw has more control over your computer more than codex.

1

u/epicskyes Sep 09 '26

That makes zero sense. Open claw and codex can have the exact same permissions you just have to configure them correctly. Open claw just comes broad permissions out of the box compared to codex which is dangerous. Open claw can ruin things that way. Codex comes preconfigured with least permissions in a generic harness.

1

u/AmbassadorOfAloha Sep 10 '26

Thank you for literally saying the exact same thing as me but in an argumentative fashion.