OpenAI sells three cybersecurity models. Two of them exist only as a row in the price list

OpenAI's GPT Cyber line — models trained for authorised vulnerability research and sold only to defenders vetted through the company's Daybreak programme — has had at least three versions in 2026. Only one of them has a model card. The public model catalogue at platform.openai.com lists exactly one Cyber model: GPT-5.6 Cyber, launched on 10 August 2026 with a full specification, benchmark comparisons and an endpoint table. The documentation addresses for gpt-5.5-cyber and gpt-5.4-cyber return 404. Neither model appears in the company's changelog, which otherwise records API releases back to 2023. The price list tells a different story. It currently carries a row for gpt-5.5-cyber at USD 12.50 per million input tokens and USD 75 per million output — the same rates as the documented GPT-5.6 Cyber. Internet Archive snapshots of that page show both older models appearing between 3 May and 5 June 2026: GPT-5.5 Cyber at USD 20 input and USD 120 output, cut by 1 August to today's level, a reduction of 37.5 percent. The row for GPT-5.4 Cyber showed dashes in every column throughout, so its price was never published at all. GPT-5.4 Cyber has now left the price list as well. OpenAI's deprecation page says it is removed from the API on 1 October 2026, with GPT-5.6 Cyber as the migration target — an announcement made on 11 September, twenty days ahead, where the rest of the company's 2026 schedule allows roughly six months. The one capability figure published for any of these models is comparative and came with the successor's launch: on OpenAI's internal Advanced Cybersecurity Completion Rate, which counts how often a model answers dual-use security prompts instead of refusing, GPT-5.5 Cyber reaches 57.3 percent against 95.0 percent for GPT-5.6 Cyber. No test of actual skill has been released for either older version. The gap matters because the Daybreak Red alias points at the newest model only. A customer running GPT-5.5 Cyber has to name it explicitly — and has no manufacturer documentation describing what they are running.