OpenAI published details of the Patch the Planet coordination program on its site
OpenAI Launches Patch the Planet to Fix Open-Source Vulnerabilities
The program extends AI security work beyond raw vulnerability discovery into validated remediation and deployment support, covering the full defensive loop for critical open-source software. Open-source maintainers gain access to AI-assisted security engineering they would not otherwise have.
The full picture
OpenAI launched Patch the Planet, a program that pairs AI-assisted vulnerability research with human security engineering to help open-source maintainers move from finding flaws to deploying fixes. The program is part of OpenAI's broader Daybreak cybersecurity effort. OpenAI partnered with Trail of Bits, HackerOne, and Calif; Trail of Bits has dedicated security engineers working full time with Codex and GPT-5.5-Cyber across 19 open-source projects. The team has already identified hundreds of security issues and merged dozens of patches, with more undergoing coordinated disclosure. OpenAI also released GPT-5.5-Cyber through limited access for trusted defenders as part of the same expansion. Initial participating projects include cURL, NATS Server, pyca/cryptography, Sigstore, aiohttp, Go, freenginx, and Python. OpenAI is withholding exploit mechanics and project-specific details where disclosure is still underway.
How it developed
OpenAI announced Patch the Planet and the June 2026 Daybreak expansion, including the release of GPT-5.5-Cyber for trusted defenders
Sources
Related
Want this in your inbox?
I send one email each morning with the stories that moved. If you would rather just read here, that works too.
Subscribe free