OpenAI / Wikimedia Commons (Public domain)
Trail of Bits' work includes audits of prominent crypto and blockchain projects such as Uniswap, Aave and Worldcoin.
Tue 13 Oct 2026 · 18:13 EDT · 1 min read
In AI
Share
OpenAI is holding preliminary discussions to buy Trail of Bits, a cybersecurity and security-research company that specializes in identifying and fixing vulnerabilities in open-source software, The Information reported Tuesday, citing people familiar with the matter.
The talks come as OpenAI seeks to develop a substantial cybersecurity business. The potential transaction’s value is unknown, and the discussions are ongoing and may not result in a deal, the people said.
Based in New York, Trail of Bits provides security audits, adversarial testing, vulnerability discovery and security engineering tools. It examines software for exploitable weaknesses and works with developers to fix them, particularly in widely used open-source projects.
The two companies launched Patch the Planet in June to use AI to find open-source software vulnerabilities, have security experts review the results and help develop and publicly release fixes. Trail of Bits has also applied OpenAI security-oriented models, including Codex, to speed up vulnerability remediation.
Buying the firm would give OpenAI access to experienced security researchers, established audit capabilities and expertise in open-source security response, supporting its efforts to expand its cybersecurity business and address threats enabled by AI.
Disclosure: This article was edited by Diego Almada Lopez. For more information on how we create and review content, see our Editorial Policy.