OpenAI has significantly increased rewards in its Security Bug Bounty program to encourage researchers to find vulnerabilities in its software. The company is more than quadrupling the midpoint of reward ranges for medium, high, and critical findings on average. A critical vulnerability in core products like ChatGPT, Codex, or the API Platform will now earn up to $30,000.
Exceptional critical findings remain eligible for up to $100,000, and now up to $172,000 with bonuses. High-quality reports are now eligible for bonus multipliers, particularly those with reliable proof of concepts that isolate the bug, show when it can be exploited, and demonstrate impact. To build long-term relationships, OpenAI is introducing a tiered loyalty bonus program with five scaling tiers for researchers who consistently partner to make AI safer.
Priority campaigns will feature dedicated bonus pools for newly launched features, offering early, high-reward opportunities. For reports submitted in the 30 days before the announcement, OpenAI will apply new reward ranges and pay the difference if the finding would have earned more. The security team will be at PROMPT2PWN in Oakland on November 20-21 for in-person testing.
Independent researchers play an essential role in protecting technology, and incentivizing responsible disclosure remains a core part of OpenAI's security model, complementing its Defense Factory work.
Source: OpenAI Blog · Summarized by HeadlinesBriefing