started · updated
OpenAI reportedly in talks to acquire security firm Trail of Bits
OpenAI is reportedly in early discussions to acquire Trail of Bits, a New York-based security firm. While neither company has publicly confirmed the talks, the potential deal highlights a strategic focus on integrating security directly into AI model and system architectures.
The two companies already maintain a working relationship through the “Patch the Planet” initiative launched in June 2026. This project combines OpenAI’s specialized models, such as GPT-5.5-Cyber and Codex Security, with the expertise of Trail of Bits engineers to identify and fix vulnerabilities in open-source software like Python, Go, and cURL.
Trail of Bits has been transitioning into an “AI-native” firm to improve bug detection rates, reportedly finding up to 200 bugs per week on certain projects. An acquisition would aim to bridge the gap between the rapid discovery of software flaws via AI and the complex human effort required to validate and patch them.