The Defenders' Window Is Open — WWT Is Stepping Through It

AI is accelerating attacker capability faster than most defenders were built to respond.

That's the reality we're facing. Not someday. Now.

For years, cybersecurity has operated around a familiar model: identify risk, prioritize what matters, patch what you can, monitor what remains and respond when something breaks through. That model still matters, but the speed and scale of what's coming require something more.

AI is changing the economics of cyber. It can help attackers find weaknesses faster, automate reconnaissance, accelerate exploit development and scale social engineering. The same capability can also help defenders find vulnerabilities earlier, validate what's actually exploitable, prioritize risk with more context and remediate faster than traditional processes allow.

That's why World Wide Technology signed OpenAI's "A Call for Collective Action on Cyber Defense."

Why we signed

The message is straightforward: status-quo security practices won't be enough against AI-enabled attacks, and no single company, government, lab or security vendor can solve this alone. The letter calls on cybersecurity companies, technology partners, governments and frontier AI labs to work together to strengthen cyber defense before the gap gets wider.

We signed because it reflects what we're already seeing every day.

Security teams are under pressure. Vulnerability backlogs are growing. Attack surfaces are expanding. Supply chains are more complex. Identity risk now includes humans, machines, service accounts and AI agents. Critical infrastructure, data centers, AI factories and operational technology are all becoming part of the security conversation. And boards are asking a much broader question: Are we resilient enough to operate through what comes next?

That's the defenders' window.

The defenders' window

For now, frontier AI gives defenders a chance to move faster than they could before. A chance to find dangerous weaknesses before adversaries exploit them, to validate defenses continuously instead of periodically, and to turn findings into verified fixes rather than longer reports.

That window won't stay open forever. Frontier AI will find more vulnerabilities. That only helps if we can also prove what matters, contain the capability safely, remediate faster and verify that risk actually went down.

That's where WWT intends to play.

From awareness to action

We are taking the next step by participating in programs  putting advanced frontier cyber capabilities into the hands of vetted, trusted defenders so we can find and fix vulnerabilities before adversaries exploit those same capabilities.

To me, that's the practical follow-through on the OpenAI call. It moves the conversation from awareness to action, from "AI will change cyber" to "how do we safely use frontier AI to defend real environments?"

This matters because WWT works across frontier AI, cybersecurity, infrastructure and mission-critical environments. The model is the easy part. The operating model around it is the work.

What trusted access actually requires

Enterprises need trusted environments to test these capabilities before they're connected to production. They need to know which AI systems they're using, what data those systems touch, what tools they can access, what identities they assume, how they're monitored, how findings are validated and how remediation is governed.

They also need to know the environment around the model can be trusted. Trusted access has to include trusted containment, trusted evidence and governed remediation. The model is no longer the only security boundary. The sandbox, identity layer, tools, network, telemetry, monitoring and incident-response process are all part of the control plane.

Through our Advanced Technology Center, AI Proving Ground, cyber architecture, partner ecosystem and global execution capabilities, we can help teams move from concern to proof, and from proof to an operating model they can actually run. We can help them assess readiness, validate controls, prioritize vulnerabilities, test remediation workflows and build operating models that move at the speed AI is forcing on the market.

Access alone isn't the outcome. Having a seat at the table is the starting point, not the finish line.

The work now is to convert that access into measurable outcomes: faster vulnerability discovery, better prioritization, validated defenses, safer remediation and real risk reduction. That's how we close the gap between what attackers can do with AI and what defenders are prepared to do in response.

The defenders' window is open. WWT is stepping through it to make sure we're secure, all together.