Information technology / Cybersecurity
SentinelOne: Reverse engineering malware and analyzing links between threats
- Company
- SentinelOne
- Country
- United States
- Adoption stage
- In operation
- Source published
- Date basis
- The date the source was published. It can differ from the date adoption started.
- How the source was checked
- Read the full source text
The work problem
According to a SentinelOne customer story published by OpenAI on October 14, 2026, reverse engineering a sophisticated piece of malware could take even a top security researcher 4 to 6 weeks. As a result, SentinelOne's research teams could reserve deep investigation only for the most interesting or important threats, and with fewer samples to compare, they had fewer chances to find connections between threats.
Technology and data
SentinelOne uses OpenAI Daybreak, which gives defenders access to OpenAI models for cybersecurity work, to reverse engineer malware and understand how software behaves. With faster analysis, researchers investigate more samples and look for shared components in seemingly unrelated samples, which can give them leads during customer investigations. Chief AI Officer Gregor Stewart said his team remains responsible for the outcome and that decisions to change software architecture still need human review.
Results
Gregor Stewart said OpenAI Daybreak now produces human-level reverse engineering output in roughly 8 hours for work that took a top researcher 4 to 6 weeks. He explained that faster reverse engineering lets the company map a much larger part of the malware landscape and that more employees now take on security investigations themselves instead of relying on a small group of specialists.
Limits and open questions
The story does not disclose how many malware samples were reverse engineered, how the roughly 8 hours was measured or how results are validated.
Sources
- SentinelOne cuts malware analysis from weeks to hoursopenai.com, Accessed
Compiled from public sources. These are not results from ATF Works customers.