# OpenAI Bio Bounty Goes Ongoing: $50K Jailbreaks as Launch-Day Infrastructure

Times of AI Desk · 2026-07-09 · Policy

[https://timesof.ai/2026/07/openai-bio-bug-bounty-program](https://timesof.ai/2026/07/openai-bio-bug-bounty-program)

> Same day GPT-5.6 went public, OpenAI turned its GPT-5.5 bio bounty into an ongoing private Bio Bounty Program—universal jailbreaks vs a fixed biosafety challenge, top award $25K→$50K, GPT-5.6 in scope. External adversarial testing as continuous ops, not a side quest.

Model launch days usually bury safety ops. Pairing a **public GPT‑5.6 unlock** with a **doubled, permanent bio jailbreak bounty** is OpenAI advertising **external adversarial testing** as continuous infrastructure—especially for a risk domain (biorisk) that governments and enterprises treat as non-negotiable.

**OpenAI** on **July 9, 2026** announced that its **GPT‑5.5 Bio Bug Bounty** is becoming an **ongoing private program**—the **OpenAI Bio Bounty Program**—aimed at **universal jailbreaks** that defeat a fixed **biosafety challenge** on frontier models, **starting with GPT‑5.6** and continuing forward. The top reward rises from **$25,000 to $50,000** for a qualifying universal jailbreak on **GPT‑5.6 and GPT‑5.5**; partial awards remain discretionary. GPT‑5.5 stays in scope through the prior testing window (**through July 27, 2026** per contemporaneous program notes).

## What changed

From OpenAI’s primary “OpenAI Bio Bug Bounty” safety post (July 9) and TechRepublic / program page context:

| Item | Detail |
|------|--------|
| **From** | Time-boxed GPT‑5.5 bio red-team bounty (applications earlier in 2026) |
| **To** | Ongoing private **Bio Bounty Program** |
| **Target** | Universal jailbreaks vs predefined **biosafety** challenge |
| **Models** | **GPT‑5.6** in scope from launch; **GPT‑5.5** retained |
| **Top award** | **$50,000** (was $25,000) |
| **Access** | Invite / application-based private program for vetted red-teamers |

OpenAI frames the program as part of strengthening safeguards for **advanced biology capabilities** as frontier models ship—explicitly tying the escalation to the **GPT‑5.6** public era. It also sets a competitive benchmark: other labs either match external bio red-team incentives or explain why not.

## Limits

- Private/invite program—results and award rates are not public dashboards.
- “Universal jailbreak” criteria are OpenAI-defined against a fixed challenge; not a general bio-capability eval suite.
- Partial awards remain discretionary.

## Sources

- [OpenAI: “OpenAI Bio Bug Bounty” (July 9, 2026)](https://openai.com/index/bio-bug-bounty)
- OpenAI prior GPT‑5.5 Bio Bug Bounty materials (April 2026) for baseline $25K structure.
- TechRepublic and program application page notes on $50K raise and GPT‑5.6 scope (July 9–10, 2026).