News
Bug Bounty: OpenAI
Publication date unknown · Discovered bugcrowd.com
Page published
Publication date unknown · First observed: 9 Nov 2026
Coverage timeline
Single-source advisory — one report is available.
Why it matters
OpenAI's bounty policy clarifies which AI-assisted security findings qualify for rewards and establishes authorization, safe-harbor, and data-protection boundaries for researchers.
OpenAI's Bugcrowd security bounty policy advertises increased rewards, quality and loyalty bonuses, and exceptional payouts up to $172,000 with bonuses. Model-behavior findings such as jailbreaks, hallucinations, and prompt-based safety bypasses are excluded, but model-assisted attacks may qualify when they exploit a separate flaw in an in-scope OpenAI product or OpenAI-controlled integration.