OpenAI and Trail of Bits launch Patch the Planet to fix open source bugs

OpenAI announced on Monday (22) the launch of 'Patch the Planet', an initiative in partnership with the cyber security company Trail of Bits to assist maintainers of open source projects to locate and fix critical bugs. The name is a direct allusion to the 'Hack the Planet' catchphrase of the film 'Hackers' (1995), but with a constructive purpose: to strengthen the security of the open source ecosystem, which today supports much of the global digital infrastructure, including AI systems. The information was first disclosed by TechCrunch (Source).

How does Patch the Planet initiative for open source security work?

The program will offer free access to static and dynamic analysis tools developed by Trail of Bits, as well as specialized consulting for selected open source projects. Maintainers may submit their repositories for an in-depth security assessment, receiving detailed reports of vulnerabilities and correction recommendations. The initiative also provides workshops and open documentation to enable the community to identify faults autonomously.

Why did open source security become a priority?

With the growing adoption of AI and machine learning, libraries and open source frameworks have become frequent targets of attacks. A single bug in a popular dependency can compromise thousands of applications. Recent data indicate that 18 trillion dollars in corporate debt suffocate the adoption of AI, and the insecurity of open source components is one of the factors that slow investments. Patch the Planet seeks to reduce this risk by providing direct support to critical projects.

How do open source maintainers participate in Patch the Planet?

Registration will be open from July 2026 on the official website of the initiative. OpenAI and Trail of Bits will give priority to projects with a large user base, but that do not have the resources to perform paid security audits. The selection will be based on criteria such as potential impact of vulnerabilities, maintenance activity and relevance to the AI ecosystem.

Impact of Patch the Planet on Brazilian developers

Brazil has an active open source community, with projects ranging from natural language processing libraries to computer vision tools. Brazilian developers maintainer of open source projects can apply and receive support equivalent to that of large security companies. The initiative will also publish all the knowledge generated in Portuguese, expanding access to cybersecurity information in the country.

Common questions about Patch the Planet

Who can sign up for Patch the Planet?

Any maintainer of an open source project, regardless of size or area, can sign up. Priority will be given to projects with proven relevance and limited resources.

Does the initiative cost maintainers?

Nope. Patch the Planet is totally free. OpenAI and Trail of Bits cover all costs of analysis and consulting.

How do I know if my project has been selected?

The selected will be notified by email after the registration period. A public list will also be published on the program website, respecting the privacy of projects that choose not to disclose vulnerabilities.