OpenAI announced “Patch the Planet,” a new initiative under its Daybreak cybersecurity program aimed at finding and fixing security vulnerabilities in widely used open-source software, the company said on June 22. The effort pairs its GPT-5.5-Cyber model with human security engineers to move open-source projects from vulnerability findings to merged fixes.
What was announced
Patch the Planet was founded with security firm Trail of Bits, in collaboration with HackerOne, Calif, independent researchers and project maintainers. According to OpenAI, more than 30 open-source projects have committed to take part, with initial participants including cURL, the Go project, Python, python.org, Sigstore, pyca/cryptography, NATS Server, aiohttp and freenginx.
Rather than flooding maintainers with raw AI output, the program has security engineers vet findings before they reach a project, then work with maintainers to develop patches and tests. Trail of Bits committed its security research organization to the work full-time alongside OpenAI’s Codex and GPT-5.5-Cyber tools.
Early results
In the first week, engineers worked across 19 projects, surfaced hundreds of potential issues and, after review, merged early fixes, OpenAI said. Reporting on the launch put the first-week tally at 51 confirmed issues with 19 already patched. OpenAI describes the approach as designed to reduce maintainer burden rather than add to it, with reusable workflows so teams can keep improving security after the first round of fixes.
Why it matters for Georgia
Georgia’s growing software, fintech and startup sector runs on exactly this kind of open-source infrastructure — Python, Go, nginx and cURL sit underneath countless local products and public services. Small Georgian teams rarely have dedicated security staff, so vulnerabilities in shared dependencies are a real exposure. Tools that help maintainers triage and fix bugs faster make the whole stack that local companies build on more secure, and the model points to how AI-assisted security review could support Georgia’s national AI and cyber-resilience ambitions.