OpenAI is planning its next internal security sprint, partnering with Cathedral to use its own models to harden its systems, quadrupling bug bounty rewards, and committing $1 billion in subsidized Daybreak access for frontline defenders.
OpenAI is preparing its next internal security sprint with Cathedral Systems to test and strengthen its defenses using AI.
# Preparing our next security sprint to harden OpenAI
Source: [https://openai.com/index/preparing-our-next-security-sprint-to-harden-openai/](https://openai.com/index/preparing-our-next-security-sprint-to-harden-openai/)
We’re planning our next internal security sprint at OpenAI, bringing new researchers and security partners together with our own teams to use our models to test and strengthen our systems\. We’re partnering with Cathedral, whose researchers will use OpenAI’s models alongside our teams to challenge our defenses, bringing differentiated expertise and approaches to finding weaknesses and helping us protect our platforms\.
We’re also[making improvements](https://openai.com/index/rewarding-defenders-with-bigger-bug-bounties/)to our[Security Bug Bounty program](https://openai.com/index/security-on-the-path-to-agi/)including more than quadrupling our rewards for critical findings\. We want researchers to challenge our assumptions and help strengthen both our systems and the methods we use to defend them\.
This is part of our ongoing effort to use AI to continuously find and fix weaknesses in our systems\. Our last sprint showed what this approach can deliver\. We dedicated 25% of our product engineers to finding and fixing weaknesses in our systems\. Using Codex, engineers investigated findings, reproduced vulnerabilities in isolated environments and prepared patches for review\.
We’re building on that work because traditional cyber defenses alone are no longer sufficient\. Recent incidents across the industry show how quickly threats can emerge and how important it is to build continuous defensive loops to find and fix weaknesses before attackers do\.
Keeping the[defender’s window](https://openai.com/index/the-defenders-window/)open requires organizations to use frontier cyber capabilities to harden their systems\. We’re using our most capable models to strengthen our own defenses and making them available to[Daybreak](https://openai.com/daybreak/)customers\. We’ve committed[$1 billion](https://openai.com/index/daybreak-for-frontline-defenders/)in subsidized access over six months for frontline defenders protecting essential services and digital infrastructure\. We’re also sharing our[architecture and lessons](https://openai.com/the-defense-factory/)from the last sprint, alongside our[blueprint](https://openai.com/index/empowering-cyber-defenders/)for empowering cyber defenders across industry and government\.
We’ll keep advancing our models, using them to strengthen our own systems, and expanding access for trusted defenders\. Keeping the defender’s window open will take action across the industry, and that work needs to start now\.
OpenAI announced its next internal security sprint, partnering with Cathedral Systems to use its models to find and fix vulnerabilities, while quadrupling bug bounty rewards with critical findings eligible for up to $172,000.
OpenAI is launching Daybreak, an initiative designed to leverage AI for accelerating cyber defense and enabling continuous software security for partner companies.
OpenAI expands its Daybreak suite with a Codex Security plugin, the full GPT-5.5-Cyber model for defenders, a Cyber Partner Program, and the Patch the Planet initiative to accelerate vulnerability discovery and patching at machine speed.
OpenAI is expanding Daybreak with two access tiers (Blue and Red) and introducing GPT-5.6-Cyber, a purpose-trained cybersecurity model that significantly reduces refusals for authorized defensive security work.