Scaling security with responsible disclosure

OpenAI · 1 year ago · 35

OpenAI has introduced an Outbound Coordinated Disclosure Policy to standardize how it reports vulnerabilities it discovers in third-party software. The policy establishes a framework for notifying affected vendors before public disclosure, with timelines and communication protocols designed to give developers time to patch. This approach aims to balance transparency with giving organizations opportunity to address security issues before broader awareness could lead to exploitation.