Understand this story
On November 3, 2026, OpenAI announced plans to conduct its next internal security sprint and to partner with Cathedral Systems, whose researchers will use OpenAI models to challenge its defenses alongside the team. OpenAI also said that bounties for critical vulnerabilities have been increased more than threefold, reaching up to $172,000 including bonuses; the new standards also apply to reports pending review, and bounties already paid out over the past 30 days will be topped up to the difference if they qualify under the new tiers. No further progress has been disclosed at this time.
AI-generated from public reports
Latest development · Report
OpenAI Plans New Security Sprint and Raises Bug BountyDevelopments
1 confirmed developments
Reports and discussion timeline
Browse reports and discussion by time. Their evidence levels remain distinct.
Nov 3
Unite.AI
OpenAI Plans New Security Sprint and Raises Bug Bounty
OpenAI announced plans to conduct a new round of internal security sprints with external researchers such as Cathedral. On the same day, the bug bounty update raised the median reward ranges for medium-, high-, and critical-severity vulnerabilities by an average of more than fourfold. Critical vulnerabilities in core products such as ChatGPT, Codex, or the API Platform can earn up to $30,000, and particularly severe findings can reach $172,000 after bonuses. In previous sprints, OpenAI committed 25% of its product engineers, used Codex to reproduce vulnerabilities and prepare patches, mobilized more than 250 people covering over 100 service areas, and closed 53 urgent or high-priority issues on the first day. OpenAI will also open its strongest models to Daybreak customers for authorized defensive work, a program corresponding to a $1 billion commitment and a six-month usage target.
Unite.AIRelated discussion
Unite.AI joined this discussion
This post contributes to heat; it is not a formal report or confirmed fact.
OpenAIFirst-party
OpenAI Partners with Cathedral Systems for Security Sprint, Critical Vulnerability Bounties More Than Tripled
OpenAI plans to run its next internal security sprint and is partnering with Cathedral Systems, whose researchers will use OpenAI models to challenge its defenses alongside the team. Bounties for critical vulnerabilities have been increased more than threefold, reaching up to $172,000 including bonuses; the new standards also apply to reports pending review, and bounties paid out over the past 30 days will receive the difference if they qualify under the new tiers.