SentinelOne uses OpenAI Daybreak to cut malware reverse-engineering from weeks to hours

SentinelOne has integrated OpenAI Daybreak to accelerate malware reverse-engineering, reducing the time required for deep analysis from 4–6 weeks to approximately 8 hours. Gregor Stewart, Chief AI Officer at SentinelOne, states that the tool produces human-level output, allowing researchers to investigate a significantly larger volume of threats.

Expanding Threat Intelligence

Previously, SentinelOne reserved deep investigation for only the most critical threats due to resource constraints. The speed provided by Daybreak allows the team to map a broader portion of the malware landscape and identify relationships between samples that were previously invisible. Stewart describes this as "a kind of intelligence that we were never able to afford before," noting that comparing more samples helps defenders proactively identify shared components and evolving threat connections.

Human Accountability and Democratized Security

While automation handles the heavy lifting of analysis, Stewart emphasizes that human accountability remains essential for architectural decisions. However, the tool democratizes access to expert-level security capabilities, enabling more team members to handle investigations rather than relying on a small group of specialists. SentinelOne also plans to integrate these capabilities into code creation, allowing developers to address security issues during the build process.