Cyber Security News

OpenAI to Acquire Promptfoo to Address Vulnerabilities in AI Systems

OpenAI has announced the acquisition of Promptfoo, an artificial intelligence security platform designed to help enterprises identify and fix vulnerabilities in their AI systems during development.

Once the acquisition is finalized, OpenAI plans to integrate Promptfoo’s advanced security evaluation technology directly into OpenAI Frontier.

This enterprise platform is specifically designed to help businesses safely build and operate AI coworkers for their internal environments.

As organizations increasingly integrate AI agents into real-world business workflows, ensuring data security and regulatory compliance has become a massive challenge.

When AI coworkers have access to sensitive corporate data and internal infrastructure, the risk of exploitation rises significantly.

Companies need systematic ways to test how AI models behave in unpredictable scenarios, detect potential threats before public deployment, and maintain strict oversight.

By acquiring Promptfoo, OpenAI aims to provide developers with a built-in, practical solution to secure complex AI systems at an enterprise scale.

Enhancing Security in OpenAI Frontier

The integration of Promptfoo will introduce several core cybersecurity capabilities to the Frontier platform, focusing on proactive threat detection and risk management:

  • Automated safety testing: Developers will have access to native tools for automated security testing and AI red-teaming, a practice in which security mechanisms simulate cyberattacks to identify flaws.
  • Threat mitigation: The platform will actively help teams hunt down and fix critical vulnerabilities, including prompt injections, model jailbreaks, unauthorized data leaks, and misuse of integrated enterprise tools.
  • Secure development workflows: By weaving evaluation tools directly into the development cycle, Frontier will allow organizations to identify and investigate agent risks much earlier in the software build process.
  • Traceability and governance: The updated platform will feature integrated reporting systems to document all security testing, allowing businesses to monitor changes over time and meet strict compliance expectations.

Continued Support for Open Source Security

Led by founders Ian Webster and Michael D’Angelo, the Promptfoo team brings extensive engineering expertise in securing and validating AI applications.

Their existing technology is already trusted by over a quarter of Fortune 500 companies to evaluate the safety of Large Language Model (LLM) applications.

According to OpenAI leadership, this expertise will be crucial for helping businesses deploy reliable AI systems without compromising corporate security.

While OpenAI will heavily integrate these enterprise features into Frontier, the company confirmed it will also continue to develop and support Promptfoo’s widely used open-source command-line interface (CLI) and library.

This commitment ensures that the broader cybersecurity community, independent researchers, and external developers will retain access to essential open-source red-teaming resources.

As AI agents become more deeply connected to enterprise data, this acquisition highlights the tech industry’s growing focus on proactive vulnerability management and robust AI governance.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

2 days ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

2 days ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

2 days ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

2 days ago