AI Briefing
KOSign in

OpenAI more than quadruples bug bounty midpoints and introduces quality and loyalty bonuses

·2026.11.03 03:00

Key point

The update includes a 5-tier loyalty program, priority campaign multipliers for new features, and retroactive payments for recent reports.

Details

  • OpenAI is more than quadrupling the midpoint of reward ranges for medium, high, and critical vulnerabilities in its Security Bug Bounty program.
  • Critical vulnerabilities in core products like ChatGPT, Codex, or the API Platform now earn up to $30,000, with exceptional findings eligible for up to $100,000 or $172,000 including bonuses.
  • New incentive structures include a quality multiplier for reliable proofs of concept, a 5-tier loyalty bonus system for consistent researchers, and priority campaign multipliers for testing newly launched features.
  • Retroactive payments will be issued for bounties awarded in the 30 days prior to the announcement if the new ranges result in a higher payout.
  • The security team will attend the PROMPT2PWN conference in Oakland on November 20–21 to engage with researchers in person.
securityopenaicodexchatgptbug-bountyvulnerability-disclosure
Read originalShare on Threads

This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.

Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.

Related

OpenAI BlogOpenAI Partners with Cathedral and Quadruples Bug Bounty Rewards for Security SprintOpenAI BlogOpenAI and Oracle integrate applications into ChatGPT and launch AI-powered productsHacker NewsOpenAI Merges ChatGPT and Codex Usage Limits for Plus, Pro, and Business PlansHacker NewsParameter Labs Discloses P1 ChatGPT Sandbox Escape Enabling Account TakeoverTLDR AIRed-teamers identify 11 attacks allowing misaligned agents to bypass Codex Auto-reviewTLDR AIOpenAI rolls out texting feature for Dot agents to US Pro users