NEWS · COMPANIES · #3002
OpenAI boosts bug bounty payouts, adds loyalty program and security sprint
OpenAI significantly increased its bug bounty rewards—critical vulnerabilities in core products such as ChatGPT or Codex now qualify for up to $30,000, exceptional findings up to $100,000, and with quality, loyalty, and campaign bonuses total awards can reach roughly $172,000. The company also introduced a five-tier loyalty program, time-limited campaigns with boosted payouts (retroactive for reports in the last 30 days), and is running a security sprint with the firm Cathedral alongside OpenAI engineers.
KEY POINTS
- OpenAI significantly increased its bug bounty rewards—critical vulnerabilities in core products such as ChatGPT or Codex now qualify for up to $30,000, exceptional findings up to $100,000, and with quality, loyalty, and campaign bonuses total awards can reach roughly $172,000.
- The company also introduced a five-tier loyalty program, time-limited campaigns with boosted payouts (retroactive for reports in the last 30 days), and is running a security sprint with the firm Cathedral alongside OpenAI engineers.
- Higher payouts, loyalty incentives, and an internal security sprint increase incentives for external researchers and internal teams to find and fix vulnerabilities in widely used AI products, improving safety and reducing risk.
WHY IT MATTERS
Higher payouts, loyalty incentives, and an internal security sprint increase incentives for external researchers and internal teams to find and fix vulnerabilities in widely used AI products, improving safety and reducing risk.