Security testing firm Calif, under OpenAI's "Patch the Planet" initiative, used GPT-5.6 Sol to discover a PHP vulnerability, while Wiz used its Atlas security AI agent, Gemini 4 Argon, and GPT-5.6 Sol to find multiple PHP vulnerabilities. Both followed responsible disclosure and coordinated with PHP on patches before going public.