OpenAI announced on November 6 that it is partnering with security firm Hacktron to look for vulnerabilities in OpenAI's own systems. Engineers from both companies will jointly pick high-priority targets, with a particular focus on the seams where OpenAI's systems connect to third-party services.

As part of the deal, Hacktron gets broader access to OpenAI's frontier models through Daybreak Red, the restricted program that also gates GPT-6 Cyber. Hacktron builds AI agents for code review, penetration testing and red-teaming, and OpenAI first encountered the firm through its Security Bug Bounty program, where its researchers reported flaws in how applications, cloud infrastructure and identity systems interact.

OpenAI placed the partnership alongside two other steps the same week: a security sprint with Cathedral's researchers and raised bug-bounty rewards. No findings, counts or scope list were disclosed, so for now this is a statement about how OpenAI intends to test itself — with an outside offensive team aimed at its integrations — rather than a result.