Artificial Intelligence
OpenAI raises bug bounty payouts to $172,000
OpenAI said it had raised rewards for vulnerability reports in products such as ChatGPT and Codex, added loyalty and campaign bonuses, and planned a security sprint with Cathedral.
- OpenAI said critical vulnerabilities in core products such as ChatGPT and Codex could earn outside researchers up to $30,000.
- The company said exceptional findings could pay up to $100,000, and bonuses could bring the total to about $172,000.
- OpenAI said it would add a five-tier loyalty programme and time-limited campaigns tied to new feature launches.
- It said anyone who had reported a vulnerability in the previous 30 days would receive the difference between the old and new rates.
- OpenAI said Cathedral would join its engineers in a security sprint, and it said 25 per cent of product engineers took part in the last one.
OpenAI said it had increased bug bounty payments for critical flaws in products including ChatGPT and Codex, with outside researchers able to receive up to $30,000. It said exceptional reports could be worth up to $100,000, and that quality, loyalty and campaign bonuses could raise the total to around $172,000.
The company said it would add a five-tier loyalty programme and temporary campaigns linked to new feature launches. It also said anyone who had reported a vulnerability in the previous 30 days would be paid the difference between the old and new rates.
OpenAI said the security firm Cathedral would work with its own engineers in a security sprint to test its systems. It said that in the previous sprint, 25 per cent of its product engineers had been involved in finding vulnerabilities.
Named in this story
Companies
- OpenAI
- announced higher bug bounty payouts and a security sprint
- was used for comparison with OpenAI's vulnerability rewards
- Apple
- was used for comparison with top-tier exploit payouts
- Microsoft
- was used for comparison with top-tier exploit payouts
- Cathedral
- was named as the security firm joining OpenAI on the sprint
Products and systems
- ChatGPT
- one of the products covered by the higher bounty
- Codex
- one of the products covered by the higher bounty
How the source tells it
The article read like a promotional product announcement, with a cheerful, comparative register centred on larger payouts and rival benchmarks.
- vendor boosterism The announcement foregrounded OpenAI's own reward ladder and compared it with rival programmes.
- hype The payout totals were presented as a stacked maximum with bonus layers attached.