OpenAI Launches Patch the Planet Initiative to Aid Open-Source Security

OpenAI has launched Patch the Planet, a new initiative part of its Daybreak cybersecurity program, which was designed to serve the open-source community. The company is working with cybersecurity firm Trail of Bits that has committed its entire security research organization for the project.

In its own announcement, Trail of Bits said that while models like GPT-5.5-Cyber can produce "a firehose of security findings" for users, project maintainers, who are already stretched thin, will have to sift through all of them to identify real vulnerabilities from false positives. Patch the Planet is meant to reduce project maintainers' burden by putting them in contact with security researchers, who use OpenAI's top models and Codex Security to identify vulnerabilities and review findings before they even reach the maintainers. The researchers then work with maintainers to develop and test patches, as well as to create workflows that maintainers can follow to continue improving their projects' security.

For the initiative's first week, Trail of Bits' security engineers worked with 19 open-source projects using OpenAI's Codex and GPT‑5.5‑Cyber models. The company said its engineers discovered hundreds of legitimate bugs and 51 issues, 19 of which have already been fixed. For the first round, the participants include cURL, NATS Server, pyca/cryptography, Sigstore, aiohttp, the Go project, freenginx, Python and python.org. OpenAI said more projects will join in future rounds.