Rewarding defenders with bigger bug bounties

OpenAI is increasing rewards in its Security Bug Bounty program to encourage independent researchers to find vulnerabilities. The midpoint of reward ranges for medium, high, and critical findings is more than quadrupled on average. Critical vulnerabilities in core products like ChatGPT, Codex, or the API Platform can now earn up to $30,000, with exceptional findings eligible for up to $172,000 with bonuses. New incentives include quality bonus multipliers for high-quality reports, a tiered loyalty program, and priority campaign multipliers for newly launched features. Retroactive payments will apply the new ranges to unrewarded reports and to bounties awarded in the 30 days before the announcement. OpenAI's security team will also attend PROMPT2PWN in Oakland on November 20–21.

(Source：OpenAI)