OpenAI · 2026-11-06 · notable
OpenAI hires Hacktron — the team that hacked it now tests its systems
In short
OpenAI is partnering with Hacktron, the AI security startup that reached its internal code through the bug bounty, to find vulnerabilities in OpenAI's systems, starting with connections to third-party services.
OpenAI · 2026-11-06 · 2 sources checked
Two months after Hacktron used AI to reach OpenAI's internal repo, OpenAI hired it to keep looking.
What is it?
OpenAI announced on 6 November 2026 that it is partnering with Hacktron to find vulnerabilities in OpenAI's systems. Hacktron is the small security firm that, inside OpenAI's bug-bounty program, chained a forum bug and an SSO flaw into an employee's Codex account and a pull request in OpenAI's internal monorepo.
How does it work?
Hacktron researchers and OpenAI engineers will pick high-priority areas to test together, with a first focus on how OpenAI's systems connect to third-party services — the same boundary the earlier exploit crossed. OpenAI is widening Hacktron's access to its frontier models through Daybreak Red, its tightly governed program for red teaming and penetration testing.
Why does it matter?
A frontier lab is turning an outside team that broke in into a standing partner, and giving it stronger models to attack its own stack. Hacktron CEO Zayne Zhang argues that the future of cybersecurity will not be defined by who has the largest security team but by combining human skill with frontier AI.
Who is it for?
security engineers and red teams