The Information Machine
Following·Day 121·4 sources

OpenAI Launches Patch the Planet to Fix Open-Source Vulnerabilities

The gist

The program extends AI security work beyond raw vulnerability discovery into validated remediation and deployment support, covering the full defensive loop for critical open-source software. Open-source maintainers gain access to AI-assisted security engineering they would not otherwise have.

The full picture

OpenAI launched Patch the Planet, a program that pairs AI-assisted vulnerability research with human security engineering to help open-source maintainers move from finding flaws to deploying fixes. The program is part of OpenAI's broader Daybreak cybersecurity effort. OpenAI partnered with Trail of Bits, HackerOne, and Calif; Trail of Bits has dedicated security engineers working full time with Codex and GPT-5.5-Cyber across 19 open-source projects. The team has already identified hundreds of security issues and merged dozens of patches, with more undergoing coordinated disclosure. OpenAI also released GPT-5.5-Cyber through limited access for trusted defenders as part of the same expansion. Initial participating projects include cURL, NATS Server, pyca/cryptography, Sigstore, aiohttp, Go, freenginx, and Python. OpenAI is withholding exploit mechanics and project-specific details where disclosure is still underway.

How it developed
21 October 2026

OpenAI published details of the Patch the Planet coordination program on its site

24 June 2026

OpenAI announced Patch the Planet and the June 2026 Daybreak expansion, including the release of GPT-5.5-Cyber for trusted defenders

Sources
The daily email

Want this in your inbox?

I send one email each morning with the stories that moved. If you would rather just read here, that works too.

Subscribe free