OpenAI raises security rewards to roughly $172,000 with bonuses
OpenAI announced higher vulnerability-reporting rewards on 2 November 2026. A critical flaw in ChatGPT, Codex or the API Platform can now earn up to $30,000 as a base reward.
Exceptional critical findings remain eligible for $100,000, reaching roughly $172,000 when bonuses combine. That ceiling illustrates a possible calculation; it is neither a standard payment nor evidence of an award already paid.
Three mechanisms reward report quality, researcher loyalty and priority campaigns. The company particularly seeks reproducible demonstrations identifying exploit conditions and impact.
The new ranges apply to reports not yet awarded a bounty. For awards made during the thirty days before the announcement, OpenAI plans a top-up where the new base and loyalty bonus would have produced a larger amount.