According to OpenAI’s update from November 2, 2026, the company has expanded its Security Bug Bounty program by raising reward amounts and introducing three new types of bonuses. Independent security researchers who find and report vulnerabilities will now benefit from higher base payouts.
In addition to the base increases, OpenAI is now awarding bonuses for:
- Report quality: More detailed, actionable, and reproducible reports may earn extra rewards.
- Loyalty: Researchers with a history of valuable contributions can receive additional payments as recognition.
- Priority campaign participation: Certain time-limited or focus-area campaigns may carry extra incentives for addressed issues.
If you are involved in security research or responsible disclosure, make sure to review OpenAI’s updated bounty terms before submitting reports. These changes aim to encourage more proactive and high-quality security work in their ecosystem.