OpenAI in early talks to buy Trail of Bits, The Information reports
“Trail of Bits has committed their entire security research organization,” OpenAI wrote in June, when the two companies launched a joint project to fix open-source software. OpenAI is in early talks to buy Trail of Bits, a firm that finds and fixes security flaws in open-source software. Valida Pau

“Trail of Bits has committed their entire security research organization,” OpenAI wrote in June, when the two companies launched a joint project to fix open-source software.
OpenAI is in early talks to buy Trail of Bits, a firm that finds and fixes security flaws in open-source software. Valida Pau and Amir Efrati reported the talks for The Information on 13 October, citing people familiar with the matter.
The talks are ongoing and could still fall apart, the people said. The size of a possible deal is not known. OpenAI has sometimes paid in the low hundreds of millions of dollars in stock for small startups, and sometimes less, The Information reported.
TNW has not independently verified the report. TNW found no public comment on the talks from either company.
Trail of Bits was founded in 2012 and has more than 40 employees, according to The Information. Its engineers audit software for others. In August, it began working with Cloudflare to audit Signal’s key verification.
The two companies have worked together since June. They launched Patch the Planet, a project inside OpenAI’s Daybreak cyber programme. Trail of Bits engineers use OpenAI’s GPT-5.5-Cyber model and its Codex tools to find bugs in open-source projects. They check the findings, write patches and work with the maintainers on fixes.
At launch, the team was working full time across 19 projects, OpenAI said. These include cURL, Python and the Go project. By then it had found hundreds of security issues and merged dozens of patches.
OpenAI is trying to build a substantial cybersecurity business, The Information reported. In September, it put $1bn behind cyber defence for water utilities and community banks under Daybreak.
Also in September, OpenAI bought Glass Imaging, a camera startup.
Cristian Dina is the CRO at The Next Web. He has interviewed 300+ industry leaders and authored the book King of Networking, establishing hi (show all) Cristian Dina is the CRO at The Next Web. He has interviewed 300+ industry leaders and authored the book King of Networking, establishing himself as one of the most connected and respected voices in the ecosystem. At just 23 years old, Cristian was included in the Forbes 30 Under 30 2025 list, representing a new generation of tech builders, bold thinkers who move fast, build with purpose, and create real impact.
Get the most important tech news in your inbox each week.
Thanks! Check your inbox to confirm your subscription.
By subscribing you agree to our Privacy Statement.