OpenAI raises bug bounties to a maximum of about $172,000
OpenAI announced it is quadrupling its bug bounties: critical vulnerabilities in core products such as ChatGPT and Codex can earn up to $30,000, exceptional findings can reach $100,000, and with quality, loyalty, and event bonuses stacked on top, the total comes to about $172,000. It added a five-tier loyalty program and time-limited bonus campaigns tied to new product launches, and those who submitted vulnerability reports in the past 30 days will receive the difference between the old and new rates. OpenAI is also preparing a security sprint in which the security firm Cathedral and its own engineers will stress-test its systems together; the company says 25% of its product engineers took part in vulnerability hunting during the last sprint.
Why read this
AI score 53
The original article lists the specific tiers and bonus structure of the bug bounty, which can be compared with similar programs at Google, Apple, and Microsoft to see where OpenAI's security investment stands.
Topics
Body
OpenAI quadruples bug bounty payouts and launches new internal security sprint. Critical vulnerabilities in core products like ChatGPT or Codex now earn outside researchers up to $30,000, the company announced . Exceptional findings can net up to $100,000, and with quality, loyalty, and campaign bonuses, the total can reach roughly $172,000.
That puts OpenAI in the same ballpark as Google's general vulnerability rewards program, though still below the top-tier payouts Apple or Microsoft offer for OS-level exploits. New additions include a five-tier loyalty program and time-limited campaigns with boosted payouts tied to new feature launches. Anyone who reported a vulnerability in the last 30 days will get the difference between the old and new rates retroactively.
Alongside the bounty overhaul, OpenAI is preparing a security sprint where the security firm Cathedral will team up with OpenAI's own engineers to stress-test its systems. During the last sprint, 25 percent of OpenAI's product engineers worked on finding vulnerabilities, according to the company.