News
Rewarding defenders with bigger bug bounties
First reported · Discovered openai.com
Page published
Earliest dated coverage: 2 Nov 2026 · First observed: 3 Nov 2026 · Latest dated coverage: 2 Nov 2026
Coverage timeline
Single-source incident — one report is available.
Why it matters
OpenAI’s expanded bounty program increases incentives for independent researchers to find and responsibly disclose security weaknesses in widely used AI services.
OpenAI announced higher Security Bug Bounty rewards, with critical vulnerabilities in core products such as ChatGPT, Codex, and the API Platform eligible for up to $30,000. Exceptional critical findings remain eligible for $100,000, rising to approximately $172,000 with new report-quality, loyalty, and priority-campaign bonuses.