OpenAI
November 6, 2026
Security
Partnering with Hacktron to find vulnerabilities in OpenAI’s systems
Loading…
Today we’re announcing a partnership with Hacktron to find vulnerabilities in OpenAI’s systems. Our engineers and Hacktron’s security researchers will choose high-priority areas to test together, with a focus on how our systems interact with third-party services. As part of the partnership, we’re expanding Hacktron’s access to our frontier models through Daybreak Red.
As we work to accelerate cyber defense with frontier AI, we’re applying the same urgency to finding and fixing vulnerabilities in our own systems. Earlier this week, we announced that Cathedral’s researchers will work alongside our teams in our next security sprint. We also raised our bug bounty rewards to give independent researchers more reason to pursue vulnerabilities our own testing may have missed.
We became familiar with Hacktron through our Security Bug Bounty program and were impressed by the impact of the vulnerabilities its researchers have discovered and disclosed to us. The team builds AI agents for code review, penetration testing, and red teaming. Their research(opens in a new window) has uncovered vulnerabilities in how applications, cloud infrastructure, and identity systems interact. Their work shows what’s possible when security engineers build around AI to move faster and take on more ambitious research.
As AI agents connect services in new ways, that combination of skills becomes even more valuable. Working alongside Hacktron will help us test those connections more deeply and use what we learn to strengthen our defenses.
“The future of cybersecurity won’t be defined by who has the largest security team, but by who can best combine human creativity with AI-driven capabilities.
OpenAI is setting a strong example by putting frontier cyber models in the hands of security researchers, enabling them to uncover complex vulnerabilities at the boundaries between interconnected systems.
We’re excited to deepen our partnership with OpenAI, combining our offensive security expertise with their frontier models to help secure OpenAI and the broader software ecosystem.”
—Zayne Zhang, CEO, Hacktron
We’re grateful to Hacktron and other independent researchers who put time into finding and reporting weaknesses to help strengthen the security that protects all our users. To see which systems are in scope or submit a finding, visit our Security Bug Bounty program(opens in a new window).
2026
Cybersecurity
Keep reading
View all
Preparing our next security sprint to harden OpenAI
SecurityNov 2, 2026
Rewarding defenders with bigger bug bounties
SecurityNov 2, 2026
Expanding Daybreak as the Cyber Defense Window Narrows
SecurityAug 10, 2026