OpenAI raises bug bounties and plans a new security sprint
OpenAI says it is more than quadrupling, on average, the midpoint of its bug bounty rewards for medium, high and critical findings. A critical bug in ChatGPT, Codex or the API Platform now earns up to $30,000, and exceptional critical findings can reach up to $172,000 with new bonuses for report quality, loyalty and priority campaigns. Unpaid reports already submitted get the new rates. Separately, OpenAI is planning its next internal security sprint with security firm Cathedral, whose researchers will use OpenAI's models alongside its teams to test its defences.
Why it matters: If your company's data sits in ChatGPT or the API, this is OpenAI paying more for outsiders to find holes before attackers do. It is also a model worth copying: if you run software, a clear disclosure route and fair rewards bring you more bug reports.
OpenAI ↗AI-assisted, reviewed by Sorted AI
▲ 0
0 comments