Not every organization has the benefit of a 24x7 security team who is able to respond to incidents when they are disclosed on a Friday night⁠(opens in a new window). It’s important for all software developers to benefit from the advanced cybersecurity capabilities of frontier models, which is why we’ve committed $10 million in API credits through our Cybersecurity Grant Program.

Initial recipients include Socket⁠(opens in a new window) and Semgrep⁠(opens in a new window), which focus on software supply chain security, and Calif⁠(opens in a new window) and Trail of Bits⁠(opens in a new window), which pair frontier models with vulnerability research experts. We’re looking to partner with more teams that have a proven track record of identifying and remediating vulnerabilities in open source software and critical infrastructure systems—teams can apply here⁠⁠.

The critical defenders joining this program protect digital infrastructure we all rely on, and will help us learn from real-world use, improve our safety systems, and make advanced defensive capabilities more useful across the ecosystem. These are firms that are already world-renowned for enterprise security leadership in their respective industries. The goal is to build the trust, verification, and accountability needed to make these tools available to the many defenders whose work keeps people, institutions, and critical systems safe.

Companies and organizations that have already signed up to support these efforts include Bank of America, BlackRock, BNY, Citi, Cisco, Cloudflare, CrowdStrike, Goldman Sachs, iVerify, JPMorgan Chase, Morgan Stanley, NVIDIA, Oracle, Palo Alto Networks, SpecterOps, US Bank, and Zscaler⁠(opens in a new window).