The new Safety Bug Bounty⁠(opens in a new window) program focuses on AI-specific safety scenarios listed below:

While jailbreaks are out of scope for this program, we periodically run private bug bounty campaigns focused on certain harm types, such as Biorisk content issues in ChatGPT Agent⁠ and GPT‑5⁠. We invite interested researchers to apply to these programs when they arise.

Outside of the categories listed above, if researchers identify flaws that facilitate direct paths to user harm and actionable, discrete remediation steps, these may be considered in scope for rewards on a case-by-case basis. General content-policy bypasses without demonstrable safety or abuse impact are out of scope for this program. For example, “jailbreaks” that result in the model using rude language or returning information that is easily findable via search engines are out of scope.

Researchers interested in participating can apply through our Safety Bug Bounty⁠(opens in a new window) program. We look forward to working alongside researchers, ethical hackers, and the safety and security community in the pursuit of a secure AI ecosystem.