OpenAI's Patch the Planet logs 1,995 issues across 68 codebases; 466 patches merged upstream
OpenAI and Trail of Bits report their Patch the Planet program has reviewed 68 open-source codebases, logged 1,995 issues, written 679 patches, and merged 466 upstream as of October 21.
Verified October 22, 2026.
What happened
Patch the Planet is a coordinated-disclosure effort inside OpenAI's Daybreak cybersecurity initiative, built with Trail of Bits and launched in June 2026. Its October 21 dashboard shows 68 open-source codebases under review, with 1,995 issues found, 679 patches written, and 466 accepted upstream. Selected maintainers get a week of dedicated Trail of Bits security engineering plus six months of ChatGPT Pro, including conditional Codex security access. HackerOne is a launch partner, handling shared intake, triage, remediation tracking, and coordinated disclosure through its H1 Platform.
Why it matters
The figures are program-reported, not independently audited. The gap between 1,995 issues found and 466 patches merged is the pitch for keeping humans in the loop. Discovery is getting faster, but review and merging still need people. Coordinated disclosure only works if maintainers can keep up with what the AI finds.
Sources
Get updates like this every morning
- ② Card on Stripe
- ③ 7 days free
Then $2/month · cancel anytime in one click