OpenAI announced Patch the Planet on June 22, 2026, a Daybreak initiative built with Trail of Bits to help maintainers strengthen critical open-source software, according to openai.com.
The initiative pairs AI-assisted security research using OpenAI’s “most cyber-capable models” with expert human review to identify and patch vulnerabilities, according to openai.com. Security engineers from Trail of Bits will review findings before they reach maintainers, work with projects to develop patches and tests, and build reusable workflows, both sources report.
According to openai.com, “Many maintainers are already being asked to sort through more reports, more quickly, with the same limited time and resources. Patch the Planet is built to reduce that burden, not add to it.”
OpenAI is also partnering with HackerOne and Calif for vulnerability triage, coordinated disclosure, and additional focused vulnerability discovery efforts, according to openai.com.
Initial participants include cURL, NATS Server, pyca/cryptography, Sigstore, aiohttp, the Go project, freenginx, Python, and python.org, according to openai.com. These projects support widely used networking, cryptography, software supply chain, and language infrastructure.
Security researchers will use OpenAI’s frontier models and Codex Security tools to assist in the process, according to both sources. According to openai.com, each engagement begins in consultation with maintainers to understand project needs and preferences.