Rewarding defenders with bigger bug bounties

PUBLISHER ARTICLE PREVIEW

From the original article

We’re raising rewards in OpenAI’s Security Bug Bounty program to further encourage independent researchers to pursue vulnerabilities in OpenAI software that our testing may have missed. We’re also introducing new incentives for researchers to earn more for higher quality vulnerability reports.

Independent security researchers play an essential role in protecting technology across the industry. At OpenAI, incentivizing responsible disclosure is a core part of our security model, complementing our Defense Factory⁠ work, where our engineers use our models to find weaknesses, reproduce them, and test fixes.

Today’s updates are designed to encourage and empower researchers, and to continue building a collaborative, community-first security environment.

We’re more than quadrupling the midpoint of our reward ranges for medium, high, and critical findings on average. A critical vulnerability in a core product such as ChatGPT, Codex, or the API Platform will now earn up to $30,000.