OpenAI 将漏洞赏金提高至最高约 17.2 万美元
Bug hunters can now earn up to $172,000 from OpenAI as company ramps up security
OpenAI 宣布将漏洞赏金提高四倍，ChatGPT、Codex 等核心产品的严重漏洞最高可获 3 万美元，特别发现可达 10 万美元，叠加质量、忠诚度和活动奖金后总额约 17.2 万美元。新增五档忠诚度计划和与新品发布绑定的限时加奖活动，过去 30 天内提交漏洞报告者可按新旧费率差额补发。OpenAI 同时筹备一次安全冲刺，由安全公司 Cathedral 与其工程师共同对系统做压力测试；公司称上一次冲刺中有 25% 的产品工程师参与漏洞查找。
推荐理由
AI 评分 53
原文列出漏洞赏金的具体档位与加成结构，可对照 Google、Apple、Microsoft 的同类项目看 OpenAI 的安全投入位置。
主题
正文
OpenAI quadruples bug bounty payouts and launches new internal security sprint. Critical vulnerabilities in core products like ChatGPT or Codex now earn outside researchers up to $30,000, the company announced . Exceptional findings can net up to $100,000, and with quality, loyalty, and campaign bonuses, the total can reach roughly $172,000.
That puts OpenAI in the same ballpark as Google's general vulnerability rewards program, though still below the top-tier payouts Apple or Microsoft offer for OS-level exploits. New additions include a five-tier loyalty program and time-limited campaigns with boosted payouts tied to new feature launches. Anyone who reported a vulnerability in the last 30 days will get the difference between the old and new rates retroactively.
Alongside the bounty overhaul, OpenAI is preparing a security sprint where the security firm Cathedral will team up with OpenAI's own engineers to stress-test its systems. During the last sprint, 25 percent of OpenAI's product engineers worked on finding vulnerabilities, according to the company.