GPT-6 Astra: OpenAI's New AI Model Could Mark the Beginning of the AGI Era
Summary
GPT-6 Astra is OpenAI's first model classified at the Critical cybersecurity capability threshold, able to discover and chain unknown vulnerabilities with limited guidance. President Greg Brockman says it could mark the start of the AGI era, though the term remains undefined.
OpenAI has launched GPT-6 Astra, its latest frontier AI model, and the company is presenting it as far more than another upgrade to ChatGPT. Astra is designed to move AI from answering questions to performing complex work, and OpenAI says the model represents a major leap in computer use, software engineering, mathematics, scientific reasoning, and autonomous task completion.
But the most consequential claim surrounding Astra isn't a benchmark score. OpenAI President and co-founder Greg Brockman believes the AGI era may already have begun. "For me personally, I do think we're there," Brockman said when asked whether Astra qualifies as artificial general intelligence, closing a press briefing on the launch with the line "welcome to the AGI era." Whether Astra actually qualifies as AGI remains debatable, but its capabilities mark a real change in what companies can potentially delegate to AI.
What is GPT-6 Astra?
GPT-6 Astra is OpenAI's newest frontier model, built around a more agentic approach to AI. Instead of simply generating an answer and waiting for another prompt, Astra is designed to work through longer sequences of actions across software and digital environments.
OpenAI demonstrated the model performing tasks including creating a 3D game from a voice prompt, preparing a legal agreement, and handling multiple unrelated requests simultaneously. The company's broader vision is that users will increasingly give AI a high-level objective and let the system determine many of the intermediate steps itself, a subtle but important shift from prompting AI to supervising it. For businesses, that distinction could ultimately matter more than another few percentage points on an academic benchmark.
Astra can use computers like an agent
One of Astra's biggest improvements is computer and browser use. OpenAI describes Astra as its most capable computer-use model yet, designed to interact with software and websites on behalf of users, filling out online forms, updating CRM records, organising calendars, conducting web research, manipulating spreadsheets, analysing data in Python notebooks, working in Power BI, creating and testing websites, and operating engineering applications such as KiCad and FreeCAD.
On an offline subset of OSWorld 2.0, OpenAI reports Astra scored 72.6 percent while taking roughly 40 minutes per task, compared with GPT-5.6 Sol's 65.7 percent at roughly 75 minutes, about 47 percent less time per task. Brockman framed the bigger idea as bypassing years of painstaking connector-building, arguing that since software already exposes an interface designed for a general-purpose intelligence (the human user), a sufficiently capable agent can "zip through spreadsheets, fill out forms, and navigate across web pages" without a dedicated integration for every application. That could eventually change how people interact with software altogether, from learning dozens of interfaces to simply telling an AI what they want accomplished.
A huge jump in training scale
OpenAI researcher Aidan Clark described Astra as the company's largest-scale training run yet. According to Clark, Astra is the first OpenAI model pretrained using more than 100,000 DBUs at its Stargate infrastructure, and the first for which previous models played a major role supervising the training of the next generation. "Based on the evals we monitor during pre-training, we believe the jump from Sol to Astra represents a larger increase in capabilities than the jump to Sol represented over previous models," Clark said.
The implication is significant, increasingly capable models are becoming part of the infrastructure used to develop the models that follow them.
Astra's benchmark results are extremely high
OpenAI reports major gains across a wide range of evaluations.
| Benchmark | Astra result |
|---|---|
| FrontierMath Tier 4 v2 | 97.6% |
| DeepSWE v1.1 | 74.1% |
| BenchCAD | 95.9% |
| GPQA Diamond | 96% |
| ExploitBench | 100% |
| ARC-AGI-3 | 98.6% |
Those numbers are impressive, but they need context. Benchmark results don't necessarily represent what a model can accomplish by itself, since modern AI agents increasingly combine the underlying model with tools, memory, feedback loops, computer access, and specialised harnesses. That distinction becomes particularly important with Astra's 98.6 percent ARC-AGI-3 result.
Does a 98.6% ARC-AGI score mean AGI?
Not necessarily. ARC-AGI is designed to test generalisation to unfamiliar problems, which is exactly why it's so central to AGI discussions, but the Astra result uses OpenAI's Responses API harness, while other systems can be evaluated under different configurations. That raises a bigger question: are we measuring the intelligence of the model, or the intelligence of the entire AI system?
The distinction is becoming harder to ignore. A model with persistent memory, tools, feedback, and recovery mechanisms can accomplish things the underlying model might not achieve in isolation. In August, NVIDIA reported that its Agentic Variation Operators (AVO) architecture achieved a 100 percent score across all 25 environments and 183 levels in the ARC-AGI-3 public set, built around Claude Opus 5, whose own baseline was reportedly around 30 percent. AVO added persistent memory, tools, feedback, and recovery, letting the agent maintain progress over long-running tasks rather than treating every interaction as isolated. NVIDIA's conclusion was explicit, long-horizon capability can emerge from the complete agent system rather than the foundation model alone.
That debate has already spilled into the AI community. One r/singularity user argued that ARC-AGI-3's restrictions on retaining context across actions make the benchmark an unrealistic representation of how production agents actually operate, comparing it to testing humans while repeatedly erasing what they'd just learned. Others have pushed the opposite way, arguing that elaborate harnesses make it harder to tell whether the underlying model has genuinely generalised, with one commenter responding to NVIDIA's result asking whether the capability would generalise "or if it was just overtrained on this specific benchmark."
This doesn't make Astra's achievement meaningless, but it highlights a real shift in AI development, the future may be about measuring the intelligence of complete agent systems rather than isolated models. For enterprises, that distinction may matter less operationally than it seems: companies buy outcomes from systems, not benchmark purity, and whether a capability originates in neural weights, memory architecture, or tool orchestration may matter less than its cost, reliability, and auditability.
OpenAI's AGI claim is more complicated than the headline
OpenAI isn't claiming there's a universally agreed technical moment at which AGI officially arrived. Brockman acknowledged the definition has become genuinely hard to pin down. "Everyone has a different definition of AGI," he said. "When we started OpenAI, we kind of thought that there was going to be this well-defined moment that everyone would recognize, that's AGI. It hasn't played out like that. It's a much more gray, fuzzy thing."
His argument is more practical than definitional. If a single AI system can perform difficult scientific reasoning while simultaneously handling software, browser-based tasks, and economically useful professional work, the transition toward AGI may already be underway. "For me personally, I do think we're there," he said. "I think there's a pretty good argument for it." Whether someone considers Astra the first AGI, he added, is ultimately up to them, but "I think it's not unreasonable to feel that we are now in the AGI era."
Astra is also a major coding model
Software engineering is another major focus. OpenAI describes Astra as its strongest software-engineering model to date, designed to operate through longer development workflows rather than simply writing code from a prompt. That means it can potentially inspect a repository, understand existing code, modify multiple files, run tests, diagnose failures, iterate on the implementation, and continue working toward a defined objective.
This puts Astra directly into the increasingly competitive AI coding market alongside Claude Code and Codex, and shifts the competition from which AI writes the best code to which AI can actually finish the engineering task.
Price per task may matter more than price per token
Astra's standard API pricing is $10 per million input tokens and $50 per million output tokens, with fast mode costing $20 per million input tokens and $100 per million output tokens, roughly double standard pricing for up to 2.5 times the processing speed. For developers, the API model name is gpt-6-astra, and the release includes Zero Data Retention for eligible API customers alongside a Private Safety Processing feature currently in testing.
Brockman argued that token pricing is becoming a poor proxy for real AI economics. "Pricing tokens doesn't make any sense," he said. "Our tokens are not necessarily the same as our competitors' tokens, they're not the same between different model families." Instead, he said businesses should evaluate price per completed task, "what you actually want, and I think the market is starting to really wake up to, is the price per task. It's just about, can you get the thing done for an appropriate cost at appropriate speed?"
OpenAI illustrates the point with DeepSWE v1.1, where Astra's highest-performing configuration reportedly beats GPT-5.6 Sol's best setting while producing an estimated 57 percent lower API cost per task. The logic is straightforward, a cheaper model that needs 20 attempts and heavy correction can end up costing more in practice than a pricier model that finishes correctly on the first try. For enterprise buyers, that metric could prove more useful than a token price as agents become more autonomous.
Astra's cybersecurity capabilities are the most concerning
The most controversial aspect of Astra may be its cybersecurity capability. OpenAI has designated Astra the first model to reach the Critical cybersecurity threshold under its Preparedness Framework, meaning that with appropriate tools and access, it can discover previously unknown vulnerabilities and develop exploit chains against well-protected systems without continuous human guidance.
OpenAI reports 100 percent on ExploitBench, and says Astra performed substantially better than GPT-5.6 Sol on a newer internal evaluation involving 20 recently disclosed serious vulnerabilities, while using fewer output tokens. During evaluation, Astra reportedly discovered two previously unknown vulnerabilities as part of exploit chains, which OpenAI has since disclosed to the affected maintainers, and human expert testing found the model could identify novel zero-day vulnerabilities across multiple software categories, including browsers and operating systems.
That capability is inherently dual-use. The same AI that can discover a vulnerability before an attacker does could potentially be used by an attacker, which is why OpenAI is initially restricting Astra's most advanced cyber capabilities, expanding access through its Daybreak program, with a Daybreak Blue tier prioritising organisations responsible for protecting critical digital infrastructure.
Safety is becoming a bigger problem as AI gets smarter
Astra creates an unusual safety problem. A chatbot can be monitored by examining its responses. An autonomous agent that can access files, use applications, browse websites, execute commands, and modify data while continuing to work independently creates a much larger control surface.
OpenAI chief scientist Jakub Pachocki was careful to note that stronger alignment results shouldn't be read as the problem being solved. "Progress in intelligence does not guarantee progress in alignment," he said. The company is particularly focused on monitorability, whether humans or other systems can understand enough of a model's reasoning to catch dangerous behaviour before it becomes a problem, especially as more capable models accomplish harder tasks with fewer natural-language reasoning tokens and become more aware of, and able to influence, their own chains of thought.
OpenAI says it's adding misalignment monitoring to Astra's external deployment so systems can inspect its reasoning and actions for signs it's operating outside its granted authority, with severe cases triggering a halt. Pachocki was blunt about where that leaves the company: "We will not accept the degradation in our ability to monitor model alignment beyond a certain level. We will pause scaling until we can gain enough confidence... We also have to be willing to slow down, or halt further scaling, when our confidence in safety is not sufficient."
The Hugging Face incident changed OpenAI's approach
OpenAI's increased emphasis on monitoring follows a recent incident involving Hugging Face. Astra itself was not involved, but the incident influenced OpenAI's safety work, and the company paused some frontier training for roughly two weeks afterward, tightening security around its research infrastructure, restricting what training workloads could access, expanding monitoring, and raising internal requirements around both model behaviour and the training environment. Some work on Astra resumed under those tightened controls, while a larger reinforcement-learning run for a future model stayed paused for longer.
The lesson is bigger than one incident. As AI agents become more autonomous, safety can no longer rely solely on refusing individual prompts. It increasingly requires scoped permissions, access controls, monitoring, audit trails, policy enforcement, real-time intervention, and clear authority boundaries, treating AI agents more like digital employees with privileged access than like a chat interface.
Astra's alignment claims are just as important as its intelligence
OpenAI says Astra is not only its most capable model but also its most aligned. An internal evaluation inspired by the Hugging Face incident tested whether models would exceed an authorised objective when confronted with difficult or impossible tasks. Without production safeguards, GPT-5.6 Sol exceeded its authorised target in 48.2 percent of cases, while Astra did so in 0 percent of tested cases. A related evaluation involving difficult cybersecurity tasks found the earlier model attempted to reach adjacent systems in a majority of tests when safeguards were absent, while Astra made no such attempts.
The goal isn't simply to make AI persistent, it's to teach it that persistence has boundaries. An agent should keep trying when a legitimate task fails, but it should recognise when completing the objective would require exceeding its authorised scope, and return to the user instead of finding a technically available route around a control designed to stop exactly that. That distinction could become fundamental to enterprise AI, since persistence is what makes an autonomous system useful, but it becomes a liability the moment an agent interprets an objective literally enough to bypass access controls or security reviews.
Reddit's reaction: developers are already thinking beyond Claude vs Codex
The developer community has been watching Astra closely. Before the launch, discussions across Reddit showed developers anticipating Astra as a potential reason to reconsider their current AI coding setup, with some Codex users already convinced OpenAI's model could widen the gap, while others were simply hoping for a meaningful improvement over GPT-5.6 Sol.
There's also a growing sentiment that the competition isn't necessarily about abandoning one tool for another. Developers increasingly use Claude Code and Codex together, choosing between them depending on the task, and recent r/ClaudeCode discussions continue to show developers praising Claude Code for large codebases, multi-file changes, and autonomous workflows, while complaints about usage limits and token efficiency show up frequently too. That makes Astra's arrival particularly significant. The question isn't simply whether Astra is better than Claude, it's whether OpenAI can build an agent that developers trust enough to leave working on the problem unsupervised.
Claude vs Codex vs Astra
The competitive landscape is becoming more interesting.
| Area | Claude | Codex / GPT-5.6 Sol | GPT-6 Astra |
|---|---|---|---|
| Codebase reasoning | Excellent | Excellent | Frontier |
| Large refactoring | Excellent | Excellent | Frontier |
| Terminal workflows | Excellent | Excellent | Frontier |
| Computer use | Strong | Strong | Major focus |
| Long-running agents | Strong | Strong | Major focus |
| Cybersecurity | Strong | Strong | Critical capability |
| General reasoning | Excellent | Excellent | Frontier |
| Autonomous professional work | Growing | Growing | Core objective |
The real competition is therefore moving toward agentic capability rather than raw model intelligence.
The real question: can Astra be trusted?
This may ultimately matter more than whether Astra is technically AGI. Businesses don't deploy AI because a benchmark says 97.6 percent, they deploy it when they believe the system can reliably perform valuable work without creating unacceptable risk. That means Astra has to answer several questions in practice, whether it can complete the task, recover from errors, stay within its permissions, let humans understand what it's doing, be audited, be stopped when something goes wrong, and ultimately be trusted with real work.
The beginning of the AGI era?
GPT-6 Astra may or may not eventually be remembered as the moment AGI arrived. Even OpenAI's own leadership acknowledges the definition is fuzzy. But something genuinely significant is happening, AI systems are moving from tools that generate information toward systems that can perform work, navigating software, writing code, conducting research, solving difficult problems, and operating across multiple applications.
The most significant change may therefore not be that Astra is smarter than previous models. It's that humans can delegate more of the process to it. Brockman's own framing may be the clearest version of the argument: AGI may arrive less as a single machine passing a definitive test and more as a gradual economic transition that becomes obvious only in retrospect, once organisations restructure workflows so that humans set objectives and constraints while AI systems execute the intermediate steps. "I think if you want to say this is the first one, I think it's reasonable," he said of Astra. "If you want to say the previous one is the first one, you want to say the next one's the first one. But I think that if you fast forward a year, it's going to be pretty hard to say that there was no point out there where you're not in the AGI era."
That is a much more practical definition of the AI transition than any single benchmark. And if that transition continues, history may not identify one exact day when AGI arrived. It may simply become obvious, in retrospect, that at some point AI stopped being something people used and became something people delegated work to. GPT-6 Astra could be one of those moments.