OpenAI is planning its next internal security sprint, bringing outside researchers and security partners together with its own teams to use its models to test and strengthen its systems. The company is partnering with Cathedral, whose researchers will use OpenAI's models alongside OpenAI staff to challenge the company's defenses. Cathedral co-founder and CEO Gavin Kliger said OpenAI was setting an important example by bringing in outside firms and using its own models to test its defenses continuously. The announcement builds on an earlier sprint in which OpenAI dedicated 25% of its product engineers to finding and fixing weaknesses. Using Codex, engineers investigated findings, reproduced vulnerabilities in isolated environments and prepared patches for review. OpenAI also said it is more than quadrupling rewards for critical findings under its Security Bug Bounty program. The company argued that traditional cyber defences are no longer sufficient given recent industry incidents. It said it is making its most capable models available to Daybreak customers and has committed $1 billion in subsidised access over six months for frontline defenders protecting essential services and digital infrastructure. It also shared the architecture and lessons from its last sprint, alongside a blueprint for cyber defenders across industry and government. For Australian businesses, the immediate impact is limited. The $1 billion subsidy is aimed at frontline defenders of essential services and digital infrastructure, so eligibility for most local firms is unclear and should be checked directly with OpenAI. The more practical lesson is that continuous, AI-assisted testing of your own systems is becoming a benchmark for security. Organisations that handle personal information should note that Australian Privacy Principle 11 under the Privacy Act 1988 already requires reasonable steps to protect that information from misuse, interference, loss and unauthorised access. Nothing in the announcement changes those obligations, but it is worth reading the blueprint and considering whether regular AI-assisted code review or a bug bounty is realistic for your team.