OpenAI brings in Cathedral for its next internal security sprint and more than quadruples critical bug-bounty rewards (up to $172,000)
Partly confirmed
The takeaway
Cathedral is the ex-DOGE startup that said in October its agents got into Anthropic’s business systems.
Status
- Claim
Partly confirmed
- Our reporting
- Medium confidence
- Importance
- 3 of 5
- Last verified
- 3 November 2026
Your AI and this story
- GPT-6 Astra187 days after its cutoff
- Claude Opus 5.5126 days after its cutoff
- Gemini 4 Argon217 days after its cutoff
- Grok 4.7156 days after its cutoff
None of these four assistants can know about it. The closest, Claude Opus 5.5, stops 126 days before it.
Key facts
- Bounties: critical rewards more than quadrupled; up to $172,000 including bonuses for exceptional findings
- Partner: Cathedral Systems, whose researchers will use OpenAI models against OpenAI’s own defences
- @OpenAI post: ~518k views (fxtwitter)
- Separate OpenAI posts the same day: ‘Rewarding defenders with bigger bug bounties’
What happened
OpenAI’s pages returned HTTP 403 to us; this entry is written from OpenAI’s X post and the page titles. Sprint dates and the full bounty table are unverified.
Sources
3 sources from 2 sites. Numbers match the chips in the text.
3 sources: 3 primary
Primary
- OpenAI: Preparing our next security sprint to harden OpenAIopenai.com, official
- OpenAI: Rewarding defenders with bigger bug bountiesopenai.com, official
- @OpenAI on X (Nov 3)x.com, official
Changes
- Filed