OpenAI is in preliminary talks to buy Trail of Bits, a New York firm that specialises in security audits and in finding vulnerabilities in open-source software, according to The Information. The value of a possible deal has not been disclosed and the talks may not lead to an agreement. The two companies already work together on Patch the Planet, where AI models find bugs and experts confirm and fix them. Trail of Bits has audited projects including Uniswap, Aave and Worldcoin.
What it means: If the deal goes ahead, it will confirm that large model providers want to become cybersecurity service providers, not just tool vendors. For the European and Greek market this cuts both ways. Software companies could get cheaper and faster code review, especially for widely used open-source libraries. At the same time, even more expertise and access to sensitive code would concentrate in a handful of American groups. A fintech or e-invoicing provider that outsources security reviews to such a setup should check where its code is stored, who can access it and whether findings feed model training. Those questions tie directly to the third-party risk requirements in DORA. For Greek security auditors, the news is a warning that clients will expect a mix of AI and human judgement, so firms that do not adopt these tools will struggle to compete on price and speed in the next few years. Clients will still need named humans to sign off on findings and carry accountability for them.
Read the original on Crypto Briefing (citing The Information)
Related service: Custom software