OpenAI launches Patch the Planet for open-source security fixes

OpenAI introduced Patch the Planet as part of its Daybreak security work. The program uses AI to help find vulnerabilities in important open-source projects, then has security experts check the results and help turn confirmed issues into real fixes. Trail of Bits is part of the first push, working with projects such as cURL, NATS Server, pyca/cryptography, Sigstore, aiohttp, Go, freenginx, Python, and python.org.

Participating projects can receive ChatGPT Pro, conditional access to Codex Security, and API credits for code work, maintainer automation, and release workflows. Early work used Codex and GPT-5.5-Cyber across 19 open-source projects, finding hundreds of security issues and getting dozens of patches merged. The process also produced reusable testing and review workflows, including fuzzing setups, checks for variants of old security bugs, broader test suites, and tools for filtering weak findings.

OpenAI also shared wider Daybreak results across Linux, OpenBSD, FreeBSD, dnsmasq, HTTP/2 servers, Chrome, Safari, and Firefox, showing that these tools can help search large codebases for serious bugs. Every finding is reviewed by human security engineers before maintainers receive it, because AI can still produce many false positives.