What this record establishes
Reviewed policy
An individually reviewed public policy is linked to this program page.
Read the reviewed policy profile →
Official directory card labeled Bug Bounty. Monetary reward displayed. Program policy and submission status not reviewed.
Published asset scope
Snapshot captured 2026-10-03. Scope status: Captured.
| Asset | Type | Group / eligibility |
|---|---|---|
api.openai.comPublished location: https://api.openai.com | api | API Targets |
ChatGPTPublished location: https://chat.openai.com | website | ChatGPT |
ChatGPT PluginsPublished location: https://chat.openai.com | api | ChatGPT |
Third Party Targets | website | Third Party Corporate Targets |
OpenAI API Keys | api | OpenAI API Keys |
https://openai.orgPublished location: https://*.openai.org | website | OpenAI Research Org |
*.openai.orgPublished location: https://*.openai.org | api | OpenAI Research Org |
openai.comPublished location: https://openai.com/ | website | Other OpenAI Targets |
*.openai.com | other | Other OpenAI Targets |
Developer Platform PlaygroundPublished location: https://platform.openai.com/playground | website | Other OpenAI Targets |
Other | other | Other OpenAI Targets |
Codex Desktop | other | Codex |
| Asset | Type | Group / eligibility |
|---|---|---|
| No rows captured. This does not establish that the program has no assets or restrictions. | ||
Capture limits
- Live policy was reviewed in a browser because text retrieval omitted its dynamic content.
- The page displayed active status and an August 19, 2026 update; this is not proof of its full change history.
- Reward ranges vary by category and remain discretionary; consult the live policy.
- Currency is displayed as a dollar sign; linked standard terms mention USD generally but program-specific denomination was not explicit. Normalized bounds remain null.
- Published target group rows were captured; group descriptions, rules and exclusions may further narrow permitted research.
Live policy and platform eligibility still require review.
Sources and collection identity
- Official program page Primary source · reviewed 2026-10-03
- Published scope source Primary source · reviewed 2026-10-03
Appears in Discovery, Bounty, Bugcrowd, Profile. No identity match is inferred from a shared company name.