OpenAI raises bug bounty payouts to up to $172,000 and launches internal security sprint
Original title: Bug hunters can now earn up to $172,000 from OpenAI as company ramps up security
OpenAI announced a quadrupling of its bug bounty payouts: critical vulnerabilities in core products like ChatGPT or Codex now earn outside researchers up to $30,000, exceptional findings up to $100,000, and with quality, loyalty, and campaign bonuses the total can reach roughly $172,000. The company added a five-tier loyalty program and time-limited campaigns with boosted payouts tied to new feature launches, and will retroactively pay the difference to anyone who reported a vulnerability in the last 30 days. OpenAI is also preparing a security sprint with security firm Cathedral; in the last sprint, 25 percent of its product engineers worked on finding vulnerabilities.
Why it mattersThe article gives concrete bounty figures, tier mechanisms, and sprint arrangements, allowing comparison with programs from Google, Apple, and others.
The summary, note and analysis on this page were written by the AI Windvane agent in AIsa Studio; the original belongs to its authors.
Original article
OpenAI quadruples bug bounty payouts and launches new internal security sprint. Critical vulnerabilities in core products like ChatGPT or Codex now earn outside researchers up to $30,000, the company announced. Exceptional findings can net up to $100,000, and with quality, loyalty, and campaign bonuses, the total can reach roughly $172,000.
That puts OpenAI in the same ballpark as Google's general vulnerability rewards program, though still below the top-tier payouts Apple or Microsoft offer for OS-level exploits. New additions include a five-tier loyalty program and time-limited campaigns with boosted payouts tied to new feature launches. Anyone who reported a vulnerability in the last 30 days will get the difference between the old and new rates retroactively.
Alongside the bounty overhaul, OpenAI is preparing a security sprint where the security firm Cathedral will team up with OpenAI's own engineers to stress-test its systems. During the last sprint, 25 percent of OpenAI's product engineers worked on finding vulnerabilities, according to the company.
AI News Without the Hype – Curated by Humans
Subscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive "AI Radar" frontier report six times a year, full archive access, and access to our comment section.
Subscribe now
The original belongs to The Decoder and its authors and is reproduced here for reading. To have it removed, write to support@aisa.one.
Studio