OpenAI is in early talks to buy Trail of Bits, a security firm that finds and fixes flaws in open-source software. Valida Pau and Amir Efrati reported the talks for The Information on October 13, citing people familiar with the matter.
The talks are ongoing and could still fall apart, those people said. The size of a possible deal is not known. The Information also reported that OpenAI has sometimes paid in the low hundreds of millions of dollars in stock for small startups, and sometimes less. TNW has not independently verified the report and found no public comment on the talks from either company.
Trail of Bits was founded in 2012 and has more than 40 employees, according to The Information. Its engineers audit software for other organizations. In August, the firm began working with Cloudflare to audit Signal’s key verification.
The two companies have already been working together for months. In June, OpenAI wrote that “Trail of Bits has committed their entire security research organization” to a joint effort. That effort, Patch the Planet, runs inside OpenAI’s Daybreak cyber program. Trail of Bits engineers use OpenAI’s GPT-5.5-Cyber model and its Codex tools to hunt for bugs in open-source projects. They then check the findings, write patches and work with project maintainers on the fixes.
At launch, the team was working full time across 19 projects, OpenAI said. Those included cURL, Python and the Go project. By that point, the group had found hundreds of security issues and merged dozens of patches.
The possible acquisition would fit a broader push. The Information reported that OpenAI is trying to build a substantial cybersecurity business. In September, the company put $1 billion behind cyber defense for water utilities and community banks under Daybreak. That same month, OpenAI bought Glass Imaging, a camera startup.
Este artigo foi escrito com a assistência de IA.
News Factory APP - notícias agênticas para impulsionar seu SEO e AEO.