OpenAI has announced a strategic partnership with Hacktron, a security research firm, aimed at bolstering the robustness of its artificial intelligence systems. This collaboration will involve identifying and addressing vulnerabilities within OpenAI’s proprietary AI infrastructure.
Under the agreement, OpenAI engineers and Hacktron’s security researchers will work collaboratively to pinpoint key areas for testing. A particular focus will be placed on the intricate interactions between OpenAI’s systems and third-party services. To facilitate this, Hacktron will gain enhanced access to OpenAI’s advanced models through the Daybreak Red platform.
The move underscores OpenAI’s ongoing commitment to cybersecurity, mirroring its efforts to secure its own cutting-edge AI developments. Earlier this week, the company revealed a similar security enhancement initiative with researchers from Cathedral. Furthermore, OpenAI has increased rewards within its Bug Bounty program to incentivize independent researchers to uncover potential flaws.
Hacktron came to OpenAI’s attention through its active participation in the Security Bug Bounty program. The company’s researchers impressed OpenAI with the depth and thoroughness of vulnerabilities they identified and reported. Hacktron specializes in developing AI agents designed for code review, penetration testing, and red teaming. Their research has previously uncovered issues in application interactions, cloud infrastructure, and identity systems, showcasing the potential of AI to accelerate security research.
As the ecosystem of interconnected AI agents grows, the expertise Hacktron brings becomes increasingly valuable. This partnership will enable OpenAI to conduct deeper testing of these complex interconnections and refine its defensive mechanisms accordingly.
OpenAI expressed gratitude to Hacktron and all independent researchers for their contributions to strengthening security measures that protect all users. Details regarding the systems under test and submission guidelines can be found on the Security Bug Bounty program page.
