Risk Management · Security and Compliance
SentinelOne needed to reverse engineer sophisticated malware far faster than specialist researchers could do manually so it could investigate more samples, spot relationships across threats, and extend scarce cyber expertise beyond a small group of reverse-engineering experts.
Reported impact
SentinelOne cut malware reverse-engineering time from four to six weeks to roughly eight hours, created capacity to investigate more threats, and made it practical to connect relationships across a much larger set of malware samples while extending expert cyber capability to more employees.
SentinelOne uses OpenAI Daybreak to accelerate malware reverse engineering inside its security research workflow. Malware samples that previously demanded four to six weeks of manual specialist analysis are submitted to Daybreak, which gives defenders access to OpenAI models for cybersecurity work and produces human-level reverse-engineering output in about eight hours. Researchers then review the output, compare findings across more samples, and use the faster turnaround to map a larger portion of the malware landscape and uncover links between apparently unrelated threats. The implementation is intentionally human-supervised: SentinelOne treats the model-generated analysis as a force multiplier for deep investigation, while reserving accountability and higher-risk architectural decisions for human experts. That combination lets more team members take on security work without waiting on a small reverse-engineering bench.
Malware samples enter OpenAI Daybreak, which exposes OpenAI models to generate reverse-engineering output in roughly eight hours instead of weeks. SentinelOne researchers review the output, compare results across more samples, and use the expanded corpus of findings to connect related threats and support broader customer investigations.
“Almost everyone now has access to the kind of expertise that was in very short supply until maybe even a few months ago.”
“Faster reverse engineering enables us to map a much larger part of the malware landscape and keep pace with how it changes.”
“OpenAI Daybreak can now produce human-level reverse-engineering output in roughly eight hours.”
“Something that would’ve taken a top-flight researcher four or six weeks to do, AI is now doing at human-level output in something like eight hours.”
Review how this reference was scored and trace each normalized claim back to its documented source.
Scoring methodology
Customer Reference Value measures usefulness as a customer reference. Evidence Confidence measures the quality and traceability of available evidence, not independent verification.
Traceability
Field coverage shows which facts each source supports. Dates are shown only when documented by the source.
Related
OpenAI Sample Oct 28, 2025 Doppel Doppel needed to detect, classify, and stop phishing, impersonation, and other social-engineering threats at internet speed, long before human analysts could keep up with the volume and variation created by generative… 3x threat handling capacity GPT-5 · LLM-driven pipeline · o4-mini OpenAI Sample Sep 9, 2025 SafetyKit SafetyKit needed to review huge volumes of risky multimodal content for fraud, prohibited activity, and compliance violations with higher nuance and lower cost than legacy moderation systems or manual review could… 10+ point performance gains on hardest vision tasks with GPT-5 Computer Using Agent · GPT-4.1 · GPT-5 OpenAI Sample Jun 26, 2025 Outtake Most alternative solutions still rely on third-party contractors to manually review flagged content—a process that can be slow, inconsistent, and expensive. Outtake (opens in a new window) reimagines that system with… Built with GPT‑4o and OpenAI o3, Outtake’s system offers 24/7 threat coverage with no ticket backlogs, enabling… GPT-4.1 · GPT-4o · o3 