Tanium joins OpenAI cyber programme for threat research

Tanium has joined OpenAI's Trusted Access for Cyber programme, giving it access to OpenAI cyber models for security and threat research.

It is using that access for threat detection, vulnerability and remediation research, and internal platform security.

Its threat hunters are using advanced AI reasoning to study attacker techniques and emerging threats, with that research feeding into detection content delivered to customers. Engineers are also exploring new ways to investigate, prioritise and remediate vulnerabilities, while security teams are adding OpenAI GPT Cyber Models to existing practices used to protect Tanium's software, cloud services and infrastructure.

The announcement reflects a broader shift in cybersecurity as companies try to keep pace with attackers using AI to identify weaknesses, disguise malicious activity, and increase the speed and scale of their operations. Security vendors and enterprise software groups have increasingly argued that defensive teams need access to similar tools to keep up with a changing threat landscape.

For Tanium, the arrangement centres on work by internal researchers and engineers rather than a direct product launch. The output will reach customers through detection content and through security measures applied to the Tanium platform itself.

Three areas

The first area is threat research and detection. Tanium's threat hunters are applying the OpenAI tools to examine attacker behaviour and new threats, with the resulting research informing detection content already delivered to platform users.

The second area is vulnerability and remediation research. Engineers are testing how the cyber models can support investigations into software weaknesses and help shape how flaws are prioritised and remediated.

The third area is platform security. Tanium's security engineers are incorporating the models into established processes designed to protect the company's software, cloud services and infrastructure against new attack techniques.

Tanium described the programme as a way to give specialist security staff access to cyber tools that are not widely available. It added that its work under the programme is carried out within OpenAI's requirements and authorised-use boundaries, including identity verification, access governance and permitted-use safeguards.

Responsible use

Tanium said human judgement and oversight remain central to how it uses the models. That addresses a key issue in the cyber sector, where the use of AI in sensitive security workflows has raised questions about control, reliability and misuse.

The company's position is that AI should support the work of threat hunters, engineers and security teams rather than replace them. In practice, that means the tools are being used within existing research and security functions tied to the platform.

Christian Hunt, Chief of Engineering at Tanium, said the move reflects the company's responsibility to customers that rely on its products for visibility and control across their systems.

"Customers trust Tanium with visibility and control across their entire environment, and we take that responsibility seriously," said Christian Hunt, Chief of Engineering at Tanium.

He said the company's participation in the programme puts the models directly in the hands of its security and research staff.

"TAC puts OpenAI GPT Cyber Models in the hands of our threat hunters and security engineers. What they learn informs stronger detections, new approaches to reduce risk, and a platform customers can depend on as attackers increasingly use AI," Hunt said.

Market context

Tanium operates in endpoint management and security, where vendors are under pressure to show they can respond to threats that increasingly involve automation and AI-assisted techniques. Customers use its platform to maintain visibility and control across critical endpoints, an area that remains central to enterprise security as attacks spread across devices, cloud environments and hybrid infrastructure.

Tanium also pointed to external industry recognition in endpoint management. It has been named a leader in analyst assessments including Gartner's inaugural 2026 Magic Quadrant for Endpoint Management Tools, the IDC MarketScape report on worldwide client endpoint management software for Windows device management, and The Forrester Wave on endpoint management platforms.

While those references underline Tanium's standing in endpoint operations, the immediate significance of the OpenAI programme lies in how the company is using frontier AI in its own research and security functions. The work is aimed at improving detections, shaping vulnerability response and strengthening the platform's internal defences as AI becomes more deeply embedded on both sides of cybersecurity.