What changed
On November 6, 2026, OpenAI announced a partnership with Hacktron to find vulnerabilities in its systems. The collaboration involves OpenAI engineers and Hacktron’s security researchers selecting high-priority areas to test together, with a focus on how OpenAI’s systems interact with third-party services. As part of the partnership, Hacktron’s access to OpenAI’s frontier models through Daybreak Red is being expanded.
What this means in practice
The partnership aims to accelerate cyber defense by leveraging frontier AI to find and fix vulnerabilities in OpenAI’s systems. Earlier in November, OpenAI had announced that Cathedral’s researchers would work alongside its teams during its next security sprint. Additionally, bug bounty rewards were increased to encourage independent researchers to identify vulnerabilities that internal testing may have missed.
Limitations and availability
The partnership is part of OpenAI’s broader efforts to enhance cybersecurity through AI. Hacktron, known for building AI agents for code review, penetration testing, and red teaming, has already contributed to identifying vulnerabilities in applications, cloud infrastructure, and identity systems. The collaboration will help test new connections formed by AI agents and use the findings to strengthen defenses. The Security Bug Bounty program is available for those interested in submitting findings or checking the scope of systems under review.
