OpenAI raises bug bounty rewards for security researchers

OpenAI said it is raising Security Bug Bounty rewards and adding report quality, loyalty and priority campaign bonuses for independent security researchers, according to its announcement dated Nov. 2, 2026. The change signals a push to reward more detailed and higher-priority vulnerability reports.

Evidence and context

The announcement said the company is increasing bug bounty rewards and introducing three new bonus categories: report quality, loyalty and priority campaigns. It did not disclose the new reward amounts, eligibility thresholds or any timetable for when the revised structure will take effect.

Bug bounty programs compensate authorized researchers for responsibly reporting vulnerabilities before they are exploited. Larger rewards can make defensive research more attractive, but actual payouts still depend on scope, severity, proof requirements and remediation rules. OpenAI did not say how its updated program will compare with prior awards or whether the changes apply across all report types.

The move comes amid broader changes in security reward programs. On Oct. 13, 2026, SecurityWeek reported that Google partially reversed Chrome bug bounty cuts, while The Register reported on Aug. 4, 2026, that Microsoft bug hunters were chasing a record $20 million payday. Immunefi also reported on May 20, 2026, that nearly every long-running bug bounty program on its platform had found a critical bug, underscoring continued demand for independent security research.

The announcement did not disclose a next update date or any additional program milestones.