OpenAI more than quadruples its bug bounty and brings in Cathedral to attack its defenses
OpenAI said on Monday it is raising its security , more than quadrupling rewards for critical findings, with up to $172,000 including bonuses for exceptional ones. It will also run its next internal security sprint with Cathedral Systems, whose researchers will use OpenAI's models alongside its own teams to test its defenses. The last sprint, in which engineers used Codex to reproduce vulnerabilities in isolated environments and draft patches, involved about a quarter of OpenAI's product engineers. No start date or scope was given.
Cathedral is a pointed choice. Secondary reports say it previously reached Anthropic's internal systems through third-party software during a bounty investigation, which Anthropic said broke the program's rules; we could not confirm that account. SourcesAB
Sources
- APreparing our next security sprint to harden OpenAI (OpenAI, refused our fetch)openai.com
- BOpenAI expands security testing with help from external experts (Interesting Engineering)interestingengineering.com
This story ran in the Morning Brief of November 3rd 2026.