OpenAI partners with Hacktron to test how its systems connect to third-party services
On November 6 OpenAI announced a partnership with Hacktron, a security firm that builds AI agents for code review, penetration testing and red teaming. Engineers from both companies will pick high-priority parts of OpenAI's systems to test together, with special attention to the points where those systems talk to outside services. OpenAI is also giving Hacktron wider access to its frontier models through Daybreak Red, its program for approved security work.
Read the original on OpenAI — Partnering with Hacktron ↗
Why it matters
This is the second outside team OpenAI has brought in during the same week, after Cathedral joined its next security sprint, and it comes right after OpenAI raised its bug bounty rewards. OpenAI says it first met Hacktron through findings the firm reported to that bug bounty program. As AI agents link more apps, cloud accounts and identity systems, the gaps between them become a larger target for attackers.
What changes
- For developers
- Developers who connect their services to OpenAI products may see more scrutiny of integration points, and independent researchers can still report issues through OpenAI's Security Bug Bounty program.
- For businesses
- The deal shows a growing model of security work in which outside researchers use AI agents with privileged model access to test a vendor's own infrastructure.
- For users
- For ChatGPT and API users the effect is indirect: flaws in how OpenAI connects to other services may be found and fixed before attackers use them.
Sources
- OpenAI — Partnering with Hacktron ↗ openai.com Primary source
Summarized by AI from official sources on November 7, 2026. Spotted a mistake? Let us know. How it works