OpenAI announced an increase in its bug bounty rewards to encourage independent researchers to find vulnerabilities in its software. Critical vulnerabilities in core products like ChatGPT can now earn up to $30,000, with exceptional cases eligible for up to $172,000 including bonuses.
Key facts
| Fact | Detail | The source says |
|---|---|---|
| Critical Vulnerability Reward | $30,000 | “A critical vulnerability in a core product such as ChatGPT, Codex, or the API Platform will now earn up to $30,000.” |
| Exceptional Critical Finding Reward | $172,000 | “Exceptional critical findings on those targets remain eligible for up to $100,000, and now up to $172,000 with bonuses.” |
| Loyalty Program | 5-tier system | “We are introducing a tiered loyalty bonus program. This 5-tier system provides scaling bonuses to recognize, support, and celebrate…” |
What happened
OpenAI has announced significant enhancements to its Security Bug Bounty program to further incentivize independent researchers to identify and report vulnerabilities in its software. The company is quadrupling the midpoint of its reward ranges for medium, high, and critical findings. A critical vulnerability in core products such as ChatGPT, Codex, or the API Platform will now earn up to $30,000, with exceptional cases eligible for up to $172,000 including bonuses. High-quality reports will also receive bonus multipliers, and a tiered loyalty bonus program is being introduced to build long-term relationships with researchers. Additionally, priority campaign multipliers will offer high-reward opportunities for testing new features. OpenAI emphasizes the importance of responsible disclosure and collaboration with the security community.
In the Fathom Layer index
- ChatGPT — AI Models & Intelligence
What to weigh
- Rewards are quadrupled for critical vulnerabilities.
- High-quality reports receive bonus multipliers.
- Loyalty program bonuses are tiered.
FAQ
What is the maximum reward for a critical vulnerability?
A critical vulnerability in a core product such as ChatGPT, Codex, or the API Platform will now earn up to $30,000, with exceptional cases eligible for up to $172,000 including bonuses.
Are there any new incentives for high-quality reports?
High-quality reports will be eligible to earn a bonus multiplier on the base bounty. A reliable proof of concept that isolates the bug, shows when it can be exploited, and demonstrates its impact gives us a head start on a fix.
How does the loyalty program work?
We are introducing a tiered loyalty bonus program. This 5-tier system provides scaling bonuses to recognize, support, and celebrate researchers who consistently partner with us in making AI technology safer for everyone.
Source: OpenAI