# OpenAI Launches Policy for Reporting Security Flaws in Third-Party Software

OpenAI has announced a new Outbound Coordinated Disclosure Policy that establishes guidelines for how the company will report security vulnerabilities it discovers in third-party software.

The policy, shared via the company's official Twitter account, focuses on three core principles: integrity, collaboration, and proactive security at scale. This represents a formalization of OpenAI's approach to handling sensitive security information when its researchers or systems identify flaws in external software products.

**What This Means**

Rather than publicly disclosing vulnerabilities immediately—which could expose users to attacks—OpenAI will follow coordinated disclosure practices. This typically involves privately notifying affected vendors first, giving them time to develop fixes before any public announcement.

**Why It Matters**

As OpenAI's AI systems analyze vast amounts of code and interact with numerous software platforms, they