Patch the Planet: The Daybreak Initiative to Support Open Source Maintainers

OpenAI has introduced Patch the Planet, part of the Daybreak initiative, to reduce the burden on open source maintainers and strengthen software security. The project aims to combine AI-driven security research with expert review to support not just vulnerability identification but actual patch development.

Trail of Bits's security research organization is fully involved in the initial activities, and partnerships have also been formed with HackerOne and Calif for vulnerability triage and coordinated disclosure. Participating projects receive ChatGPT Pro, conditional access to Codex Security, and API credits for development automation.

Initial participating projects include cURL, NATS Server, pyca/cryptography, Sigstore, aiohttp, Go, freenginx, and Python. These are core infrastructure components that affect a wide range of downstream services, including networking, cryptography, and software supply chains.

Real-world application cases have confirmed the following results:

• Using GPT-5.5-Cyber to build a Fuzzing Lab covering dozens of entry points in just a single day
• Developing a reusable pipeline that analyzes past CVE patterns to find similar vulnerabilities
• Implementing AI-driven workflows for vulnerability deduplication, false-positive filtering, and patch generation