OpenAI raises bug bounty payouts, critical findings up to $30,000
Original title: Rewarding defenders with bigger bug bounties
Exceptional critical findings stay eligible for $100,000, or up to $172,000 with bonuses.
OpenAI raised rewards in its Security Bug Bounty program, saying it more than quadrupled the midpoint of ranges for medium, high, and critical findings on average. A critical vulnerability in ChatGPT, Codex, or the API Platform can now earn up to $30,000. Quality, loyalty, and priority-campaign multipliers can raise exceptional critical findings from $100,000 to as much as $172,000. Unawarded reports use the new ranges, and bounties paid in the prior 30 days may receive the difference.
Unconfirmed: OpenAI says the example vulnerabilities and historical awards are illustrative, not confirmed incidents.
- An illustrative critical ChatGPT payout rises from $6,500 to $51,577 with bonuses.
- OpenAI says the payout scenarios and historical awards are illustrative.
- Reports not yet awarded use the new ranges.
- Awards from the 30 days before the announcement may be topped up.
- OpenAI's security team will attend PROMPT2PWN in Oakland on November 20–21.
- 1.Submit findings through OpenAI's Security Bug Bounty program to qualify for the new ranges.
- Products
- ChatGPTCodexAPI Platform
- Organizations
- OpenAI
From the original article
4 min read at openai.comOpenAI is raising Security Bug Bounty rewards and introducing report quality, loyalty, and priority campaign bonuses for independent security researchers.
openai.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.