OpenAI raises Security Bug Bounty rewards and adds quality and loyalty bonuses
OpenAI announced changes to its public Security Bug Bounty program, raising reward levels for validated vulnerability reports and adding stacked bonuses aimed at independent security researchers. Beyond the headline increase, the program now incorporates report quality incentives, loyalty bonuses for sustained participation, and extra rewards during priority campaigns, reflecting a focus on how accepted reports are compensated rather than only whether they qualify. For organizations that rely on external researchers to stress-test AI products, the update underscores how major labs continue tuning disclosure economics to keep skilled defenders engaged. Operators should treat the post as a policy signal rather than a complete rate card: the published materials describe bonus categories and the intent to reward validated findings differently, without reproducing full dollar tiers in the feed excerpt.
OpenAI raises Security Bug Bounty rewards and adds quality and loyalty bonuses
OpenAI is raising Security Bug Bounty rewards and introducing report quality, loyalty, and priority campaign bonuses for independent security researchers. The change targets how validated reports are rewarded under its public bounty program.
Key takeaway
OpenAI is restructuring bug bounty payouts so validated reports can earn more through quality, loyalty, and campaign bonuses—not just flat severity tables.
What happened
OpenAI News reported that OpenAI is raising Security Bug Bounty rewards and introducing report quality, loyalty, and priority campaign bonuses for independent security researchers who participate in its public program.
The same announcement states that the change targets how validated reports are rewarded under the public bounty program, signaling new bonus layers on top of standard acceptance of findings rather than a single unchanged payout model.
Evidence
OpenAI is raising Security Bug Bounty rewards and adding quality and loyalty bonuses.
OpenAI News · attributed
OpenAI raises Security Bug Bounty rewards and adds quality and loyalty bonuses
The program introduces report quality, loyalty, and priority campaign bonuses for independent security researchers.
OpenAI News · attributed
OpenAI is raising Security Bug Bounty rewards and introducing report quality, loyalty, and priority campaign bonuses for independent security researchers.
The update focuses on how validated reports are rewarded in the public bounty program.
OpenAI News · attributed
The change targets how validated reports are rewarded under its public bounty program.
Why it matters
Security teams competing for researcher attention may need to revisit their own disclosure incentives so high-quality, repeatable reports still flow to coordinated channels.
Limits and uncertainties
The evidence packet does not specify new dollar amounts, severity tiers, or effective dates beyond the source publication timestamp.
Details of how report quality, loyalty, and priority campaign bonuses are scored or combined are not spelled out in the supplied excerpts.
Practical implications
Researchers submitting to OpenAI should read the full bounty page for updated rules on quality, loyalty, and campaign bonuses before estimating payout.
Vendors running AI bug bounty programs should compare their reward structure against OpenAI’s new bonus categories when setting researcher expectations.
What to watch
OpenAI’s published Security Bug Bounty scope and reward tables for concrete payout values and bonus eligibility criteria.
Whether other frontier labs announce parallel increases or similar quality and loyalty bonus structures.
