--- title: Rewarding defenders with bigger bug bounties | daily.dev description: OpenAI is raising payouts in its Security Bug Bounty program and adding new bonus incentives for researchers. The company says it is more than quadrupling the... canonical: https://daily.dev/posts/rewarding-defenders-with-bigger-bug-bounties-lwhqpcfmf twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Rewarding defenders with bigger bug bounties | daily.dev og:description: OpenAI is raising payouts in its Security Bug Bounty program and adding new bonus incentives for researchers. The company says it is more than quadrupling the... og:url: https://daily.dev/posts/rewarding-defenders-with-bigger-bug-bounties-lwhqpcfmf og:image: https://api.daily.dev/og/posts/LWHQpCFMF.png og:image:alt: Rewarding defenders with bigger bug bounties og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Rewarding defenders with bigger bug bounties **[OpenAI](https://daily.dev/sources/openai)** · 3 min read · 0 upvotes · 0 comments ## Summary OpenAI is raising payouts in its Security Bug Bounty program and adding new bonus incentives for researchers. The company says it is more than quadrupling the midpoint of reward ranges for medium, high, and critical findings on average. A critical vulnerability in ChatGPT, Codex, or the API Platform now pays up to $30,000, with exceptional critical findings reaching up to $172,000 after bonuses. New incentives include a quality multiplier for strong proof-of-concept reports, a 5-tier loyalty bonus program, and priority campaigns with dedicated bonus pools for newly launched features. OpenAI's security team will also attend PROMPT2PWN in Oakland on November 20 to 21. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How much does OpenAI pay for a critical vulnerability in ChatGPT? OpenAI now pays up to $30,000 for a critical vulnerability in a core product like ChatGPT, Codex, or the API Platform. Exceptional critical findings remain eligible for up to $100,000 in base award, and can reach up to $172,000 once quality, priority campaign, and loyalty bonuses are applied. _Security researchers weighing where to spend their time can track bounty program changes like this on daily.dev._ ### What is OpenAI's loyalty bonus program for bug bounty researchers? It is a 5-tier bonus system that rewards researchers who consistently submit vulnerability reports to OpenAI over time, with tiers such as Bronze and Gold applying increasing percentage bonuses on top of the base bounty and any quality multiplier. It is designed to build long-term relationships with security researchers. _Researchers comparing bug bounty programs can follow incentive structures like this one via daily.dev._ ### What is a quality multiplier in a bug bounty program? It is a bonus multiplier applied to the base bounty when a report includes a reliable proof of concept that isolates the bug, shows when it can be exploited, and demonstrates its impact. In OpenAI's program, a 1.15x quality bonus is one of several multipliers that can stack with loyalty and priority campaign bonuses. _Developers writing vulnerability reports can keep up with evolving bounty criteria through daily.dev._ ## Similar posts on daily.dev - [From Beginner to Bug Hunter: Learning Cybersecurity in the AI Era.](https://daily.dev/posts/from-beginner-to-bug-hunter-learning-cybersecurity-in-the-ai-era--sem0mn8cu) · BleepingComputer · 0 upvotes · 0 comments --- Tags: [#openai](https://daily.dev/tags/openai), [#chatgpt](https://daily.dev/tags/chatgpt), [#vulnerability](https://daily.dev/tags/vulnerability) [View this post on daily.dev](https://daily.dev/posts/rewarding-defenders-with-bigger-bug-bounties-lwhqpcfmf) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Rewarding defenders with bigger bug bounties","url":"https://daily.dev/posts/rewarding-defenders-with-bigger-bug-bounties-lwhqpcfmf","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/rewarding-defenders-with-bigger-bug-bounties-lwhqpcfmf"},"datePublished":"2026-11-03T03:05:56.847Z","dateModified":"2026-11-03T03:06:29.609Z","description":"OpenAI is raising payouts in its Security Bug Bounty program and adding new bonus incentives for researchers. The company says it is more than quadrupling the...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4f17ef1de457e41218c3737b4922081c?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/4f17ef1de457e41218c3737b4922081c?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"OpenAI","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"OpenAI","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/984b3632316f4afaa3d5213d5c64fe65","url":"https://daily.dev/sources/openai"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/rewarding-defenders-with-bigger-bug-bounties-lwhqpcfmf","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"openai,chatgpt,vulnerability","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"OpenAI","item":"https://daily.dev/sources/openai"},{"@type":"ListItem","position":3,"name":"Rewarding defenders with bigger bug bounties"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/rewarding-defenders-with-bigger-bug-bounties-lwhqpcfmf#faq","mainEntity":[{"@type":"Question","name":"How much does OpenAI pay for a critical vulnerability in ChatGPT?","acceptedAnswer":{"@type":"Answer","text":"OpenAI now pays up to $30,000 for a critical vulnerability in a core product like ChatGPT, Codex, or the API Platform. Exceptional critical findings remain eligible for up to $100,000 in base award, and can reach up to $172,000 once quality, priority campaign, and loyalty bonuses are applied. Security researchers weighing where to spend their time can track bounty program changes like this on daily.dev."}},{"@type":"Question","name":"What is OpenAI's loyalty bonus program for bug bounty researchers?","acceptedAnswer":{"@type":"Answer","text":"It is a 5-tier bonus system that rewards researchers who consistently submit vulnerability reports to OpenAI over time, with tiers such as Bronze and Gold applying increasing percentage bonuses on top of the base bounty and any quality multiplier. It is designed to build long-term relationships with security researchers. Researchers comparing bug bounty programs can follow incentive structures like this one via daily.dev."}},{"@type":"Question","name":"What is a quality multiplier in a bug bounty program?","acceptedAnswer":{"@type":"Answer","text":"It is a bonus multiplier applied to the base bounty when a report includes a reliable proof of concept that isolates the bug, shows when it can be exploited, and demonstrates its impact. In OpenAI's program, a 1.15x quality bonus is one of several multipliers that can stack with loyalty and priority campaign bonuses. Developers writing vulnerability reports can keep up with evolving bounty criteria through daily.dev."}}]} ```