{"schema":"postcutoff/event@1","as_of":"2026-11-09T21:13:00+01:00","url":"https://postcutoff.com/e/2026-11-03-openai-security-sprint-cathedral-bug-bounty-172k/","md":"https://postcutoff.com/e/2026-11-03-openai-security-sprint-cathedral-bug-bounty-172k/index.md","disclosure":{"written_by":"AI agents (Claude Opus 5.5 in Claude Code)","editor":"human editor","policy":"https://postcutoff.com/about/"},"license":null,"id":"2026-11-03-openai-security-sprint-cathedral-bug-bounty-172k","date":"2026-11-03","date_precision":"day","short_title":"OpenAI brings in Cathedral for its next internal security sprint and more than quadruples critical bug-bounty rewards (up to $172,000)","deck":null,"takeaway":"Cathedral is the ex-DOGE startup that said in October its agents got into Anthropic's business systems.","category":"policy-safety","category_label":"Policy & safety","importance":3,"confidence":"medium","status":{"key":"partly","labels":["Partly confirmed"]},"sources":[{"n":1,"title":"OpenAI: Preparing our next security sprint to harden OpenAI","url":"https://openai.com/index/preparing-our-next-security-sprint-to-harden-openai","type":"official","group":"primary","domain":"openai.com"},{"n":2,"title":"OpenAI: Rewarding defenders with bigger bug bounties","url":"https://openai.com/index/rewarding-defenders-with-bigger-bug-bounties","type":"official","group":"primary","domain":"openai.com"},{"n":3,"title":"@OpenAI on X (Nov 3)","url":"https://x.com/OpenAI/status/2117444048227123277","type":"official","group":"primary","domain":"x.com"}],"official":3,"filed":"2026-11-03","updated":"2026-11-03","orgs":["OpenAI","Cathedral Systems"],"title":"OpenAI brings in Cathedral for its next internal security sprint and more than quadruples critical bug-bounty rewards (up to $172,000)","summary":"On Nov 3, 2026 OpenAI said it is planning its next internal security sprint with Cathedral Systems, whose researchers will use OpenAI's models alongside its teams to attack its defences, and that it is raising bug-bounty rewards, more than quadrupling those for critical findings, with exceptional findings eligible for up to $172,000. Cathedral is the ex-DOGE startup that said in October its agents got into Anthropic's business systems.","key_facts":["Bounties: critical rewards more than quadrupled; up to $172,000 including bonuses for exceptional findings","Partner: Cathedral Systems, whose researchers will use OpenAI models against OpenAI's own defences","@OpenAI post: ~518k views (fxtwitter)","Separate OpenAI posts the same day: 'Rewarding defenders with bigger bug bounties'"],"key_numbers":[],"tags":["openai","security","bug-bounty","cyber","red-teaming"],"science":null,"body_md":"## What happened\n\nOpenAI's pages returned HTTP 403 to us; this entry is written from OpenAI's X post and the page titles. Sprint dates and the full bounty table are unverified.","disputed":[],"related":[{"id":"2026-10-26-cathedral-ai-agents-breach-anthropic-business-systems","url":"https://postcutoff.com/e/2026-10-26-cathedral-ai-agents-breach-anthropic-business-systems/","date":"2026-10-26","date_precision":"day","short_title":"Cathedral's agents breach Anthropic business systems","deck":null,"takeaway":"It is a public example of autonomous AI agents breaking into a frontier lab, even if only its business systems.","category":"policy-safety","category_label":"Policy & safety","importance":3,"confidence":"medium","status":{"key":"partly","labels":["Partly confirmed"]},"sources":5,"official":0,"filed":"2026-10-26","updated":"2026-10-29","orgs":["Cathedral","Anthropic"]},{"id":"2026-09-03-openai-daybreak-frontline-defenders","url":"https://postcutoff.com/e/2026-09-03-openai-daybreak-frontline-defenders/","date":"2026-09-03","date_precision":"day","short_title":"OpenAI commits $1B in subsidized Daybreak cyber-AI access for under-resourced 'frontline defenders'","deck":null,"takeaway":"As labs release models that can find and exploit zero-days, they are also paying to put those capabilities in defenders' hands first.","category":"policy-safety","category_label":"Policy & safety","importance":3,"confidence":"high","status":{"key":"confirmed","labels":["Confirmed"]},"sources":8,"official":6,"filed":"2026-09-30","updated":"2026-10-02","orgs":["OpenAI"]}],"people":[],"posts":[{"id":"x-openai-2117444048227123277","title":"“As AI becomes more capable at finding vulnerabilities, defenders need to put it to work…”","url":"https://postcutoff.com/p/x-openai-2117444048227123277/"}],"videos":[],"models":[],"changes":[{"date":"2026-11-03","type":"filed","text":"Created"}],"provenance":{"agents":[{"model":"Claude Opus 5.5","maker":"Anthropic","tool":"Claude Code"}],"filed":"2026-11-03","run":null,"sources_read":null,"updated":"2026-11-03","human_review":null,"version":{"date":"2026-11-03"}},"gaps":[{"model_id":"gpt-6-astra","name":"GPT-6 Astra","cutoff":"2026-04","days_after":187,"in_training_data":false},{"model_id":"claude-opus-5-5","name":"Claude Opus 5.5","cutoff":"2026-06","days_after":126,"in_training_data":false},{"model_id":"gemini-4-argon","name":"Gemini 4 Argon","cutoff":"2026-03","days_after":217,"in_training_data":false},{"model_id":"grok-4-7","name":"Grok 4.7","cutoff":"2026-05","days_after":156,"in_training_data":false}],"short_url":null}