OpenAI is bringing outside security researchers into its next internal security sprint, giving them access to its models to help find weaknesses in its defenses.

The company is partnering with Cathedral Systems, whose researchers will work alongside OpenAI’s teams to test its systems and help strengthen protections across its platforms.

The planned exercise builds on an earlier sprint that involved 25 percent of OpenAI’s product engineers. 

Alongside the partnership, the company is increasing its Security Bug Bounty rewards, with exceptional findings eligible for up to $172,000, including bonuses.

OpenAI has not specified when the next sprint will begin. It framed the effort as part of a broader push to use AI continuously to identify and fix vulnerabilities before attackers can exploit them.

Cathedral’s researchers will use OpenAI’s models alongside the company’s own security teams to challenge its defenses. OpenAI said the partnership would bring different expertise and approaches to identifying weaknesses.

The collaboration will also involve testing fixes, according to Gavin Kliger, Cathedral’s CEO and co-founder.

“OpenAI is setting an important example by partnering with outside security firms and using its own models to continuously test and strengthen its defenses. Every company should be thinking about how to put these capabilities to work,” Kliger said.

“We’re excited to collaborate with OpenAI’s teams, combining their models and security expertise with our research to find weaknesses, test fixes, and strengthen this approach to continuous defense,” he added. 

The announcement describes a planned collaboration rather than completed findings. It does not identify specific vulnerabilities discovered through the new partnership or detail the systems researchers will examine.

Source link