OpenAI Launches Patch the Planet To Strengthen Open-Source Security!

Open-source software powers much of the internet, but the people maintaining it often work with limited time and resources. As AI speeds up the discovery of security flaws, a new challenge has emerged: helping maintainers manage and fix those vulnerabilities before they become real-world threats. OpenAI’s latest initiative aims to address exactly that.

 

TL;DR

 

• OpenAI launched Patch the Planet to help open-source projects find and fix security vulnerabilities faster.
• Trail of Bits and AI tools have already uncovered hundreds of security issues across critical software projects.
• The initiative combines AI-powered discovery with expert human review to reduce the burden on maintainers.

OpenAI has launched Patch the Planet, a new cybersecurity initiative under its Daybreak program, designed to help open-source maintainers identify, validate, and fix software vulnerabilities. The company is partnering with Trail of Bits, alongside support from HackerOne and Calif, to combine AI-assisted security research with expert human review.

The program focuses on reducing the burden on maintainers by ensuring that security findings are reviewed, validated, and prioritized before being shared. Security engineers work directly with projects to investigate vulnerabilities, develop patches, support testing, and coordinate responsible disclosure.

Initial participants include projects such as cURL, NATS Server, pyca/cryptography, Sigstore, aiohttp, the Go project, freenginx, Python, and Python.org.

“Many maintainers are already being asked to sort through more reports, more quickly, with the same limited time and resources,” OpenAI said. “Patch the Planet is built to reduce that burden, not add to it: security engineers review findings before they reach maintainers, work with projects to develop patches and tests, and build reusable workflows that help teams continue improving security after the first fixes land.”

According to OpenAI, Trail of Bits has already dedicated security engineers to work full-time with Codex and GPT-5.5-Cyber across 19 open-source projects. The effort has reportedly uncovered hundreds of security issues, generated dozens of patches, and produced reusable security tools such as fuzzing systems, testing frameworks, threat models, and vulnerability analysis pipelines.
 
OpenAI also shared early findings from its broader Daybreak research. The company said its models helped identify vulnerabilities across operating systems, browsers, and network infrastructure, including security issues in the Linux Kernel, OpenBSD, FreeBSD, Google Chrome, Safari, and Firefox.

“Patch the Planet” highlights a broader effort to ensure AI-driven vulnerability discovery translates into practical security improvements. OpenAI says the goal is not just to find flaws faster but to help maintainers strengthen critical software infrastructure through validation, patching, testing, and long-term security support.