OpenAI's Patch the Planet Links AI Security Research to Open-Source Fixes

OpenAI launched Patch the Planet as part of its Daybreak cybersecurity program, connecting security researchers, open-source software maintainers, and incident responders to address critical vulnerabilities. The program covers the full defensive loop: discovery, validation, severity review, disclosure, patch development, testing, and deployment. Trail of Bits has dedicated security engineers working full time with Codex and GPT-5.5-Cyber across 19 open-source projects; the team has already identified hundreds of security issues and merged dozens of patches, with more undergoing coordinated disclosure. Initial participating projects include cURL, NATS Server, pyca/cryptography, Sigstore, aiohttp, Go, freenginx, and Python. OpenAI released GPT-5.5-Cyber through limited access for trusted defenders as part of the same Daybreak expansion. Each Trail of Bits engagement begins in consultation with maintainers to determine where support is most useful, including CI/CD improvements or longer-term security engineering. Cloudflare uses Daybreak to investigate vulnerabilities and propose fixes submitted for human review, and its developers use Codex to build faster and improve code quality. OpenAI is withholding exploit mechanics and project-specific details where disclosure is still underway.