OpenAI Plans Its Next Internal Security Sprint With Cathedral, More Than Quadruples Critical Bug Bounty Rewards to Up to $172,000
On November 2 (US time) OpenAI said it is planning its next internal security sprint and partnering with security firm Cathedral, whose researchers will use OpenAI models alongside OpenAI teams to challenge its defenses. It is also changing its Security Bug Bounty program, more than quadrupling rewards for critical findings; OpenAI's X post says exceptional findings can earn up to $172,000 including bonuses. Per OpenAI, the last sprint dedicated 25% of its product engineers to finding and fixing weaknesses, using Codex to reproduce vulnerabilities and prepare patches, and it has committed $1 billion in subsidized access over six months for frontline defenders.
Key Takeaways
- Critical bug bounty rewards are more than quadrupled; per OpenAI's X post, exceptional findings can earn up to $172,000 including bonuses.
- Researchers from partner Cathedral will use OpenAI models alongside OpenAI teams to test its defenses.
- Per OpenAI, the last sprint dedicated 25% of product engineers and used Codex to reproduce vulnerabilities in isolated environments and prepare patches.
- OpenAI has committed $1 billion in subsidized access over six months for defenders of essential services and digital infrastructure.
- Timing, scope and finding counts for the next sprint were not disclosed.
Linked Models & Agents:
