OpenAI partners with Cathedral Systems and hikes bug bounty rewards up to $172,000
OpenAI has teamed up with AI cybersecurity startup Cathedral Systems for an internal security sprint while boosting bug bounty payouts for exceptional critical vulnerabilities to as much as $172,000.
OpenAI announced that it is planning its next internal security sprint and partnering with cybersecurity startup Cathedral Systems to harden its infrastructure. Under the collaboration, Cathedral researchers will deploy OpenAI's models alongside the company's internal teams to probe and challenge OpenAI's defenses, aiming to detect and resolve vulnerabilities before malicious actors can exploit them.[1][2][4][5][6]
Alongside the partnership, OpenAI revamped its Security Bug Bounty program by more than quadrupling rewards for critical vulnerabilities. Payouts for exceptional findings can now reach up to $172,000, consisting of a $100,000 base reward topped with bonuses. OpenAI highlighted a one-click ChatGPT account takeover—a vulnerability that previously paid out $6,500—as an example of a top-tier finding. The updated reward tiers apply retroactively to reports submitted in the past 30 days and pending evaluations, with OpenAI pledging to pay the difference for qualifying submissions.[2][5][6]
Cathedral Systems was founded in July by four former Department of Government Efficiency staffers, according to tech outlet AGTP. The startup raised $160 million at a $1.4 billion valuation with backing from Andreessen Horowitz and Sequoia Capital. AGTP reported that Cathedral's automated AI agents managed to breach Anthropic's systems in under 12 hours the previous week, an intrusion Anthropic confirmed reached a limited set of its human resources, sales, and IT systems.[1][3][5]
Key facts
- OpenAI is partnering with Cathedral Systems for its upcoming internal security sprint to test and harden its infrastructure.
- Cathedral Systems researchers will utilize OpenAI models alongside OpenAI's teams to discover and patch system weaknesses.
- OpenAI has more than quadrupled bug bounty payouts for critical vulnerabilities, with exceptional reports eligible for up to $172,000 including bonuses.
- The revamped bug bounty rates apply retroactively to awards given in the past 30 days and pending reports.
- Cathedral Systems was founded in July by four former Department of Government Efficiency staffers and raised $160 million at a $1.4 billion valuation from Sequoia and Andreessen Horowitz.
- Anthropic confirmed that Cathedral's AI agents accessed a limited set of its IT, sales, and HR systems within 12 hours during a recent test.
Sources · 5 sources
- MT
MTS@MTSlivePost on X ·
SITUATION DETECTED: OpenAI is partnering with Cathedral Systems - the AI cybersecurity startup founded by DOGE alumni - as part of its next security sprint to harden its infrastructure.
Open source - TE
Techmeme@TechmemePost on X ·
OpenAI partners with Cathedral to test its security defenses and revamps its Security Bug Bounty program, including quadrupling rewards for critical findings (OpenAI) (Visit Techmeme dot com for the link and full context!)
Open source - MT
MTS@MTSlivePost on X ·
1. SITUATION DETECTED: OpenAI is partnering with Cathedral Systems - the AI cybersecurity startup founded by DOGE alumni - as part of its next security sprint to harden its infrastructure.
Open source - TE
TechmemeArticle ·
OpenAI partners with Cathedral to test its security defenses and revamps its Security Bug Bounty program, including quadrupling rewards for critical findings (OpenAI) OpenAI : OpenAI partners with Cathedral to test its security defenses and revamps its Security Bug Bounty program, including quadrupling rewards for critical findings — We're planning our next internal security sprint at OpenAI, bringing new researchers and security partners together with our own teams …
Open source - AG
AGTP@AGTPinsightsPost on X ·
OpenAI is working with Cathedral Systems on an internal security sprint and is raising its bug bounty rewards. Cathedral Systems is a cyber security startup that builds AI tools for security testing. Its researchers will work with OpenAI's models and internal teams to challenge OpenAI's defenses. The pairing reflects the view that as AI gets better at finding vulnerabilities, defenders need to use those capabilities to strengthen their systems before attackers do. OpenAI is also raising payouts for critical findings by more than fourfold. Exceptional reports can now reach up to $172,000 including bonuses, with a base reward of $100,000 and additional bonuses on top. One reply put core critical bounties at up to $30,000. OpenAI's own example is a one click ChatGPT account takeover, which previously carried a $6,500 reward. The new ranges apply retroactively. They cover bounties awarded in the past 30 days and reports still awaiting a reward, and OpenAI says it will pay the difference if a finding qualifies for a higher amount. The company says it plans to keep improving its models, use them to secure its own systems and expand access for its trusted defenders. On Cathedral itself, four former Department of Government Efficiency staffers founded it in July. It raised $160 million at a $1.4 billion valuation, backed by Andreessen Horowitz and Sequoia. Last week, Cathedral's AI agents reportedly accessed Anthropic systems in just under 12 hours. Anthropic confirmed that they reached a limited set of sales, human resources and IT systems.
Open source - OP
OpenAI@OpenAIPost on X ·
As AI becomes more capable at finding vulnerabilities, defenders need to put it to work before attackers do. We’re planning our next internal security sprint at OpenAI and partnering with Cathedral Systems, whose researchers will use our models alongside our teams to challenge our defenses. They’ll bring differentiated expertise and approaches to our ongoing work to find and fix weaknesses with AI. We’re also raising bug bounty rewards, including more than quadrupling rewards for critical findings. Exceptional findings will be eligible for up to $172,000, including bonuses. We’ll keep advancing our models, using them to strengthen our own systems, and expanding access for trusted defenders. https://t.co/vcaoHROTt2
Open source