OpenAI expands its security sprint and bug bounty rewards
OpenAI says it is planning a new AI-assisted security sprint with Cathedral Systems and significantly increasing bug bounty rewards for critical security findings.
AT A GLANCE
Key points
- OpenAI is planning a new AI-assisted security sprint with Cathedral Systems.
- Critical findings in core products can earn up to $30,000.
- Exceptional critical findings can reach roughly $172,000 with bonuses.
What is changing?
OpenAI announced plans for a new internal security sprint designed to find and fix weaknesses in its systems. According to the November 2 announcement, Cathedral Systems researchers will work alongside OpenAI teams, using the company’s models to challenge defenses, reproduce vulnerabilities and evaluate fixes.
The company also increased the midpoint of reward ranges for medium, high and critical findings in its Security Bug Bounty program by more than four times on average. A critical vulnerability in a core product such as ChatGPT, Codex or the API Platform can now earn up to $30,000. Exceptional critical findings can receive a $100,000 base reward and roughly $172,000 with bonuses. The updated system includes quality, loyalty and priority-campaign multipliers.
OpenAI says 25% of its product engineers participated in the previous sprint. The new rewards strengthen access for security researchers, but eligibility, target scope and final payouts remain subject to program rules and report quality.
Explore the original sources
Source date: 2 November 2026.
Published by AI Radar: 3 Nov 2026, 09:59 (Istanbul, UTC+3).
FOLLOW THE TOPIC
Topics and tags
Share your discovery.
Send this story to a friend.
Reader comments
What do you think about this development? Share your experience or question. Comments are published after editorial approval.
Your name/nickname and comment become public if approved. Read: Privacy notice.
Loading comments…