Today we’re announcing a partnership with Hacktron to find vulnerabilities in OpenAI’s systems. Our engineers and Hacktron’s security researchers will choose high-priority areas to test together, with a focus on how our systems interact with third-party services. As part of the partnership, we’re expanding Hacktron’s access to our frontier models through Daybreak Red.
As we work to accelerate cyber defense with frontier AI, we’re applying the same urgency to finding and fixing vulnerabilities in our own systems. Earlier this week, we announced that Cathedral’s researchers will work alongside our teams in our next security sprint. We also raised our bug bounty rewards to give independent researchers more reason to pursue vulnerabilities our own testing may have missed.
We became familiar with Hacktron through our Security Bug Bounty program and were impressed by the impact of the vulnerabilities its researchers have discovered and disclosed to us. The team builds AI agents for code review, penetration testing, and red teaming. Their research(opens in a new window) has uncovered vulnerabilities in how applications, cloud infrastructure, and identity systems interact. Their work shows what’s possible when security engineers build around AI to move faster and take on more ambitious research.
As AI agents connect services in new ways, that combination of skills becomes even more valuable. Working alongside Hacktron will help us test those connections more deeply and use what we learn to strengthen our defenses.
We’re grateful to Hacktron and other independent researchers who put time into finding and reporting weaknesses to help strengthen the security that protects all our users. To see which systems are in scope or submit a finding, visit our Security Bug Bounty program(opens in a new window).
