← Back to the board · Multi-lab · Table

Multi-lab security Partial

Incentivize third-party vulnerability reporting (2023 voluntary commitments)

Under the White House voluntary AI commitments (2023-07-21), signatories pledged bounty systems or contests to incentivize responsible third-party discovery and reporting of model weaknesses.

  1. Committed 2023-07-21
  2. Due run/expand bounty mechanisms covering in-scope AI systems
  3. Evaluated 2025-08-11
  4. Ruling partial

Why this ruling

The 2025 study (disclosures through 2024-12-31) scored this second-lowest, with 8 of 16 companies at 0%. Frontier labs do run AI bug bounties (OpenAI, Anthropic, Microsoft, Google), but coverage is uneven across signatories — recorded as partial.

Source
Wang, Huang, Klyman & Bommasani (AIES 2025) ↗
Committed
2023-07-21
As of
2026-06-19

Cite this commitment

Overdue. "Incentivize third-party vulnerability reporting (2023 voluntary commitments)." Overdue, 2025. https://overduetracker.org/c/wh-voluntary-vuln-reporting-2023 (retrieved 2026-06-19).