{
  "api_version": "1",
  "updated": "2026-11-05",
  "latest_event": "2026-11-04",
  "rights": "© Frontier Log, all rights reserved.",
  "story": {
    "slug": "ai-lab-bug-bounties",
    "title": "How Much AI Labs Pay for Security Bugs and AI Jailbreaks",
    "description": "Meta pays up to $300,000 for security bugs, and OpenAI up to $172,000 with bonuses after a Nov 2 raise. Jailbreak bounties top out at $50,000.",
    "url": "https://frontierlog.ai/stories/ai-lab-bug-bounties",
    "date": "2026-11-04",
    "image": "https://frontierlog.ai/og/story-ai-lab-bug-bounties.png",
    "event": null,
    "tags": [
      "cybersecurity",
      "safety"
    ],
    "steps": [],
    "tables": [],
    "records": [
      {
        "date": "2023-04-11",
        "party": "OpenAI",
        "what": "launches its bug bounty program on Bugcrowd, paying up to $20,000",
        "by": "OpenAI",
        "source": "https://openai.com/index/bug-bounty-program/",
        "quote": "Our rewards range from $200 for low-severity findings to up to $20,000 for exceptional discoveries.",
        "key": true
      },
      {
        "date": "2024-08-08",
        "party": "Anthropic",
        "what": "offers up to $15,000 for universal jailbreaks in an invite-only program",
        "by": "Anthropic",
        "source": "https://www.anthropic.com/news/model-safety-bug-bounty",
        "quote": "We're offering bounty rewards up to $15,000 for novel, universal jailbreak attacks that could expose vulnerabilities in critical, high risk domains such as CBRN (chemical, biological, radiological, and nuclear) and cybersecurity."
      },
      {
        "date": "2025-03-26",
        "party": "OpenAI",
        "what": "raises its top security bug bounty to $100,000",
        "by": "OpenAI",
        "source": "https://openai.com/index/security-on-the-path-to-agi/",
        "quote": "We are significantly increasing the maximum bounty payout for exceptional and differentiated critical findings to $100,000 (previously $20,000).",
        "key": true
      },
      {
        "date": "2025-05-14",
        "party": "Anthropic",
        "what": "offers up to $25,000 for universal jailbreaks of its Constitutional Classifiers",
        "by": "Anthropic",
        "source": "https://www.anthropic.com/news/testing-our-safety-defenses-with-a-new-bug-bounty-program",
        "quote": "We’re offering bounty rewards up to $25,000 for verified universal jailbreaks found on the unreleased system."
      },
      {
        "date": "2025-10-06",
        "party": "Google",
        "what": "launches a dedicated AI Vulnerability Reward Program",
        "by": "Google",
        "source": "https://blog.google/innovation-and-ai/technology/safety-security/ai-security-frontier-strategy-tools/",
        "quote": "we are launching a dedicated AI VRP that clarifies which AI-related issues are in scope through a single, comprehensive set of rules and reward tables."
      },
      {
        "date": "2026-03-25",
        "party": "OpenAI",
        "what": "launches a Safety Bug Bounty, with jailbreaks out of its scope",
        "by": "OpenAI",
        "source": "https://openai.com/index/safety-bug-bounty",
        "quote": "While jailbreaks are out of scope for this program, we periodically run private bug bounty campaigns focused on certain harm types"
      },
      {
        "date": "2026-07-09",
        "party": "OpenAI",
        "what": "raises its bio bug bounty for a universal jailbreak to $50,000",
        "by": "OpenAI",
        "source": "https://openai.com/index/bio-bug-bounty",
        "quote": "The reward for a universal jailbreak for the OpenAI Bio Bounty Program has been raised from $25,000 to $50,000 for both GPT‑5.6 and GPT‑5.5."
      },
      {
        "date": "2026-09-08",
        "party": "Anthropic",
        "what": "its bounty page offers up to $35,000 per universal jailbreak",
        "by": "Anthropic",
        "source": "https://support.claude.com/en/articles/12119250-model-safety-bug-bounty-program",
        "quote": "We will pay up to $35,000 per novel, universal jailbreak identified."
      },
      {
        "date": "2026-11-02",
        "party": "OpenAI",
        "what": "raises its security bug bounty rewards, up to $172,000 with bonuses",
        "by": "OpenAI",
        "source": "https://openai.com/index/rewarding-defenders-with-bigger-bug-bounties",
        "quote": "Exceptional critical findings on those targets remain eligible for up to $100,000, and now up to $172,000 with bonuses.",
        "key": true
      }
    ],
    "statements": [
      {
        "party": "Google",
        "by": "Google",
        "source": "https://bughunters.google.com/about/rules/google-friends/ai-vulnerability-reward-program-rules",
        "quote": "S1: Rogue Actions $20,000 $15,000 $10,000"
      },
      {
        "party": "Google",
        "by": "Google",
        "source": "https://bughunters.google.com/about/rules/google-friends/ai-vulnerability-reward-program-rules",
        "quote": "Generating violative, misleading, or factually incorrect content within the attacker's own session (including standard \"jailbreaks\" and \"hallucinations\")."
      },
      {
        "party": "Google",
        "by": "Google",
        "source": "https://bughunters.google.com/about/rules/google-friends/google-and-alphabet-vulnerability-reward-program-vrp-rules",
        "quote": "Remote code execution (S0) Command injection, deserialization bugs, sandbox escapes $101,010"
      },
      {
        "party": "Anthropic",
        "by": "Anthropic",
        "source": "https://support.claude.com/en/articles/12119250-model-safety-bug-bounty-program",
        "quote": "For technical vulnerabilities that potentially exist on our Information Systems such as misconfigurations, CSRFs or cross site request forgeries, privilege escalation attacks, SQL Injection, XSS, and directory traversal attacks, please refer to our Responsible Disclosure Policy"
      },
      {
        "party": "Meta",
        "by": "Meta",
        "source": "https://bugbounty.meta.com/payout-guidelines/",
        "quote": "Mobile remote code execution up to $300k*"
      },
      {
        "party": "Meta",
        "by": "Meta",
        "source": "https://bugbounty.meta.com/payout-guidelines/muse/",
        "quote": "These guidelines describe how we evaluate reports specific to Muse, with a maximum payout of $300,000*"
      },
      {
        "party": "Meta",
        "by": "Meta",
        "source": "https://bugbounty.meta.com/payout-guidelines/meta-genai/",
        "quote": "with a maximum payout $130,000* for issues specific to AI products and services"
      },
      {
        "party": "xAI",
        "by": "xAI",
        "source": "https://x.ai/security.txt",
        "quote": "Critical: $7,500-$20,000"
      },
      {
        "party": "xAI",
        "by": "xAI",
        "source": "https://x.ai/security.txt",
        "quote": "For model safety issues (prompt injection, jailbreaking, etc) please reach out to AI Safety team via safety@x.ai"
      },
      {
        "party": "OpenAI",
        "by": "OpenAI",
        "source": "https://openai.com/index/rewarding-defenders-with-bigger-bug-bounties",
        "date": "2026-11-02",
        "quote": "A critical vulnerability in a core product such as ChatGPT, Codex, or the API Platform will now earn up to $30,000."
      },
      {
        "party": "Meta",
        "by": "Meta",
        "source": "https://bugbounty.meta.com/payout-guidelines/muse/",
        "quote": "Muse, an AI product from Meta, lets people create their own personalized AI agent"
      },
      {
        "party": "Meta",
        "by": "Meta",
        "source": "https://bugbounty.meta.com/payout-guidelines/meta-genai/",
        "quote": "Being able to access private user content"
      },
      {
        "party": "Meta",
        "by": "Meta",
        "source": "https://bugbounty.meta.com/payout-guidelines/muse/",
        "quote": "Compromise of Meta production and users beyond Muse"
      },
      {
        "party": "Meta",
        "by": "Meta",
        "source": "https://bugbounty.meta.com/payout-guidelines/muse/",
        "quote": "Compromise of a specific user's Muse agent"
      },
      {
        "party": "Meta",
        "by": "Meta",
        "source": "https://bugbounty.meta.com/payout-guidelines/",
        "quote": "WhatsApp Private Processing up to $300k*"
      },
      {
        "party": "Meta",
        "by": "Meta",
        "source": "https://bugbounty.meta.com/payout-guidelines/meta-genai/",
        "quote": "Until further notice, prompt Injection and jailbreaks are considered payout-ineligible unless they are chained with another payout-eligible risk on this list."
      },
      {
        "party": "Google",
        "by": "Google",
        "source": "https://bughunters.google.com/about/rules/google-friends/ai-vulnerability-reward-program-rules",
        "quote": "we adjust the final rewards by a factor, based on the quality of the report [0.8x, 1x, or 1.2x]"
      },
      {
        "party": "Anthropic",
        "by": "Anthropic",
        "source": "https://support.claude.com/en/articles/12119250-model-safety-bug-bounty-program",
        "quote": "All Program participants are required to sign a non-disclosure agreement"
      },
      {
        "party": "Anthropic",
        "by": "Anthropic",
        "source": "https://www.anthropic.com/news/testing-our-safety-defenses-with-a-new-bug-bounty-program",
        "date": "2025-05-22",
        "quote": "The bug bounty program in this post has concluded."
      },
      {
        "party": "OpenAI",
        "by": "OpenAI",
        "source": "https://openai.com/index/bio-bug-bounty",
        "date": "2026-07-09",
        "quote": "Accepted applicants must have existing ChatGPT accounts to apply, and will sign a NDA."
      },
      {
        "party": "OpenAI",
        "by": "OpenAI",
        "source": "https://openai.com/index/rewarding-defenders-with-bigger-bug-bounties",
        "date": "2026-11-02",
        "quote": "$100,000 × 1.15 Quality × 1.30 Priority Campaign × 1.15 31337 loyalty"
      },
      {
        "party": "Anthropic",
        "by": "Anthropic",
        "source": "https://www.anthropic.com/news/testing-our-safety-defenses-with-a-new-bug-bounty-program",
        "date": "2025-05-14",
        "quote": "the program will run through Sunday, May 18"
      }
    ],
    "cites": [
      {
        "url": "https://openai.com/index/bug-bounty-program/",
        "by": "OpenAI",
        "medium": "blog post",
        "date": "2023-04-11"
      },
      {
        "url": "https://openai.com/index/security-on-the-path-to-agi/",
        "by": "OpenAI",
        "medium": "blog post",
        "date": "2025-03-26"
      },
      {
        "url": "https://openai.com/index/safety-bug-bounty",
        "by": "OpenAI",
        "medium": "blog post",
        "date": "2026-03-25"
      },
      {
        "url": "https://openai.com/index/bio-bug-bounty",
        "by": "OpenAI",
        "medium": "blog post",
        "date": "2026-07-09"
      },
      {
        "url": "https://openai.com/index/rewarding-defenders-with-bigger-bug-bounties",
        "by": "OpenAI",
        "medium": "blog post",
        "date": "2026-11-02"
      },
      {
        "url": "https://www.anthropic.com/news/model-safety-bug-bounty",
        "by": "Anthropic",
        "medium": "blog post",
        "date": "2024-08-08"
      },
      {
        "url": "https://www.anthropic.com/news/testing-our-safety-defenses-with-a-new-bug-bounty-program",
        "by": "Anthropic",
        "medium": "blog post",
        "date": "2025-05-14"
      },
      {
        "url": "https://support.claude.com/en/articles/12119250-model-safety-bug-bounty-program",
        "by": "Anthropic",
        "medium": "help center article",
        "date": "2026-09-08"
      },
      {
        "url": "https://blog.google/innovation-and-ai/technology/safety-security/ai-security-frontier-strategy-tools/",
        "by": "Google",
        "medium": "blog post",
        "date": "2025-10-06"
      },
      {
        "url": "https://bughunters.google.com/about/rules/google-friends/ai-vulnerability-reward-program-rules",
        "by": "Google",
        "medium": "program rules"
      },
      {
        "url": "https://bughunters.google.com/about/rules/google-friends/google-and-alphabet-vulnerability-reward-program-vrp-rules",
        "by": "Google",
        "medium": "program rules"
      },
      {
        "url": "https://bugbounty.meta.com/payout-guidelines/",
        "by": "Meta",
        "medium": "payout guidelines"
      },
      {
        "url": "https://bugbounty.meta.com/payout-guidelines/muse/",
        "by": "Meta",
        "medium": "payout guidelines"
      },
      {
        "url": "https://bugbounty.meta.com/payout-guidelines/meta-genai/",
        "by": "Meta",
        "medium": "payout guidelines"
      },
      {
        "url": "https://x.ai/security.txt",
        "by": "xAI",
        "medium": "security.txt"
      },
      {
        "url": "https://bugbounty.meta.com/payout-guidelines/mobile-rce/",
        "by": "Meta",
        "medium": "payout guidelines"
      }
    ],
    "sources": [
      "https://openai.com/index/bug-bounty-program/",
      "https://openai.com/index/security-on-the-path-to-agi/",
      "https://openai.com/index/safety-bug-bounty",
      "https://openai.com/index/bio-bug-bounty",
      "https://openai.com/index/rewarding-defenders-with-bigger-bug-bounties",
      "https://www.anthropic.com/news/model-safety-bug-bounty",
      "https://www.anthropic.com/news/testing-our-safety-defenses-with-a-new-bug-bounty-program",
      "https://support.claude.com/en/articles/12119250-model-safety-bug-bounty-program",
      "https://blog.google/innovation-and-ai/technology/safety-security/ai-security-frontier-strategy-tools/",
      "https://bughunters.google.com/about/rules/google-friends/ai-vulnerability-reward-program-rules",
      "https://bughunters.google.com/about/rules/google-friends/google-and-alphabet-vulnerability-reward-program-vrp-rules",
      "https://bugbounty.meta.com/payout-guidelines/",
      "https://bugbounty.meta.com/payout-guidelines/muse/",
      "https://bugbounty.meta.com/payout-guidelines/meta-genai/",
      "https://x.ai/security.txt",
      "https://bugbounty.meta.com/payout-guidelines/mobile-rce/"
    ],
    "body": [
      {
        "figure": "main"
      },
      {
        "table": {
          "cols": [
            "Lab",
            "What it pays for",
            "Top payout",
            "Program"
          ],
          "rows": [
            [
              "Meta",
              "Muse AI agent, reaching Meta production",
              "Up to $300,000",
              "[Meta Bug Bounty](https://bugbounty.meta.com/payout-guidelines/muse/)"
            ],
            [
              "Meta",
              "Mobile remote code execution",
              "Up to $300,000",
              "[Meta Bug Bounty](https://bugbounty.meta.com/payout-guidelines/)"
            ],
            [
              "OpenAI",
              "Exceptional critical findings in core products",
              "Up to $172,000 with bonuses",
              "[OpenAI Security Bug Bounty](https://openai.com/index/rewarding-defenders-with-bigger-bug-bounties)"
            ],
            [
              "Meta",
              "Meta AI, private user content",
              "Up to $130,000",
              "[Meta Bug Bounty](https://bugbounty.meta.com/payout-guidelines/meta-genai/)"
            ],
            [
              "Google",
              "Remote code execution",
              "$101,010 base",
              "[Google and Alphabet Vulnerability Reward Program](https://bughunters.google.com/about/rules/google-friends/google-and-alphabet-vulnerability-reward-program-vrp-rules)"
            ],
            [
              "Google",
              "Rogue actions in flagship AI products",
              "$20,000 base",
              "[Google AI Vulnerability Reward Program](https://bughunters.google.com/about/rules/google-friends/ai-vulnerability-reward-program-rules)"
            ],
            [
              "xAI",
              "Critical bugs",
              "Up to $20,000",
              "[xAI Bug Bounty](https://x.ai/security.txt)"
            ],
            [
              "OpenAI",
              "Universal bio jailbreak",
              "$50,000",
              "[OpenAI Bio Bounty Program](https://openai.com/index/bio-bug-bounty)"
            ],
            [
              "Anthropic",
              "Universal jailbreak",
              "Up to $35,000",
              "[Anthropic Model Safety Bug Bounty](https://support.claude.com/en/articles/12119250-model-safety-bug-bounty-program)"
            ]
          ]
        }
      },
      {
        "p": "OpenAI raised the rewards in its Security Bug Bounty on Nov 2. A critical vulnerability in a core product such as ChatGPT, Codex or the API Platform now earns up to $30,000, and exceptional critical findings on those products \"remain eligible for up to $100,000, and now up to $172,000 with bonuses,\" the company said in [a blog post](https://openai.com/index/rewarding-defenders-with-bigger-bug-bounties). The labs' own bounty pages put that figure below Meta's top of $300,000, and every jailbreak bounty they publish pays $50,000 or less."
      },
      {
        "h": "OpenAI's top payout since 2023"
      },
      {
        "p": "OpenAI [launched its bug bounty](https://openai.com/index/bug-bounty-program/) on Bugcrowd on Apr 11, 2023, with rewards \"from $200 for low-severity findings to up to $20,000 for exceptional discoveries.\" On Mar 26, 2025 it [raised the maximum](https://openai.com/index/security-on-the-path-to-agi/) for exceptional and differentiated critical findings to $100,000. The Nov 2 raise keeps that $100,000 and adds bonus multipliers for report quality, a five-tier loyalty program and short-term priority campaigns on new features. OpenAI's own example stacks all three, a quality bonus, a priority campaign and its 31337 loyalty tier, on $100,000 to reach $171,925, which the post rounds to $172,000."
      },
      {
        "h": "Security bugs pay the most, AI agents included"
      },
      {
        "p": "Meta's [payout guidelines](https://bugbounty.meta.com/payout-guidelines/) list up to $300,000 for [mobile remote code execution](https://bugbounty.meta.com/payout-guidelines/mobile-rce/) in apps such as WhatsApp and Instagram, and for WhatsApp Private Processing. [Muse](https://bugbounty.meta.com/payout-guidelines/muse/), which Meta describes as \"an AI product from Meta\" that \"lets people create their own personalized AI agent,\" pays up to $300,000 for a compromise of Meta production and users beyond Muse, and up to $130,000 for a compromise of a specific user's Muse agent. [Meta AI](https://bugbounty.meta.com/payout-guidelines/meta-genai/) issues such as being able to access private user content pay up to $130,000."
      },
      {
        "p": "Google's [Vulnerability Reward Program](https://bughunters.google.com/about/rules/google-friends/google-and-alphabet-vulnerability-reward-program-vrp-rules) pays a base reward of up to $101,010 for remote code execution, before bonuses for report quality and novelty. Its [AI Vulnerability Reward Program](https://bughunters.google.com/about/rules/google-friends/ai-vulnerability-reward-program-rules), which Google [launched on Oct 6, 2025](https://blog.google/innovation-and-ai/technology/safety-security/ai-security-frontier-strategy-tools/), pays a top base reward of $20,000 for rogue actions, attacks that change a victim's account or data, in its flagship AI products: Search, the Gemini apps and Workspace's core apps such as Gmail and Docs. xAI's [security.txt](https://x.ai/security.txt) lists $7,500 to $20,000 for critical bugs."
      },
      {
        "h": "Jailbreak bounties stop at $50,000"
      },
      {
        "p": "Anthropic offered up to $15,000 for universal jailbreaks [on Aug 8, 2024](https://www.anthropic.com/news/model-safety-bug-bounty), and up to $25,000 in a program [launched on May 14, 2025](https://www.anthropic.com/news/testing-our-safety-defenses-with-a-new-bug-bounty-program) that ran through May 18. Its [bounty page](https://support.claude.com/en/articles/12119250-model-safety-bug-bounty-program), dated Sep 8, 2026, pays up to $35,000 per novel universal jailbreak. OpenAI [raised its bio bounty](https://openai.com/index/bio-bug-bounty) for a universal jailbreak from $25,000 to $50,000 on Jul 9, 2026. Both are invite-only programs whose participants sign a non-disclosure agreement."
      },
      {
        "p": "The other programs leave jailbreaks out. Google's AI program lists them among the issues that don't qualify, Meta's AI guidelines treat them as payout-ineligible unless chained with another eligible risk, and OpenAI's [Safety Bug Bounty](https://openai.com/index/safety-bug-bounty), launched on Mar 25, 2026, says jailbreaks are out of its scope."
      },
      {
        "h": "Where no amount is published"
      },
      {
        "p": "Anthropic's bounty page sends security vulnerabilities to its Responsible Disclosure Policy, which names no reward. xAI asks for model safety issues, jailbreaking among them, to be emailed to its AI safety team, with no reward listed. Meta's guidelines, Google's rules and xAI's security.txt carry no date, so their figures are as read on Nov 4, 2026."
      }
    ],
    "events": [],
    "stories": [],
    "models": []
  }
}