OpenAI Raises Bug Bounty Payouts Up to $172,000 and Plans Security Sprint

OpenAI quadrupled bug bounty payouts and is preparing a new security sprint. Critical vulnerabilities in core products such as ChatGPT or Codex can now earn outside researchers up to $30,000. Exceptional findings can net up to $100,000, and quality, loyalty, and campaign bonuses can bring the total to roughly $172,000.

Payouts and comparisons

The new maximum places OpenAI in the same ballpark as Google's general vulnerability rewards program. It remains below the top tier payouts that Apple or Microsoft offer for operating system level exploits.

New programs and retroactive payments

OpenAI added a five tier loyalty program and time limited campaigns with boosted payouts tied to new feature launches. Anyone who reported a vulnerability in the last 30 days will receive the difference between the old and new rates retroactively.

Security sprint

OpenAI is preparing a security sprint in which security firm Cathedral will team up with OpenAI engineers to stress test its systems. During the last sprint, 25 percent of OpenAI's product engineers worked on finding vulnerabilities, according to the company.

Sources: The Decoder