We got the news yesterday: OpenAI started raising the price of their subscriptions.
I also started vlogging my weeks a bit, and I put out the first video.
Codex subs
Yesterday OpenAI raised their prices. The $200 plan that used to give you 20x usage now gives you 10x, and if you want something roughly equivalent to what we had, you now have to pay $500.
We knew this was coming. It costs them so much that it was never going to be viable long term, and honestly we made the most of it while it lasted.
I think the other players, Anthropic included, will go the same way.
Is the top plan still worth it? In our field I think it stays viable and profitable if you use it well. Maybe just stop leaving it in full autonomy for days at a time and be a bit more present while it runs.
I'm probably going to grab the $500 plan, and I also want to test other models like GLM 5.3, which looks really solid for security work. I've only heard good things, so I'll see what it actually does in real use.
The future of bug bounty
More and more programs are shutting down or slashing their rewards. Some only pay for Criticals now. It's a bit of a mess right now, and for good reason: at this point it's turned into a cash machine.
My take is that it'll settle down over the next few years. The models are going to get too expensive to churn out an RCE a day, so we'll have to be more careful with our token usage and actually use AI as an assistant, not the way it is now where it does absolutely everything.
Everyone will have their own system: their agents, their prompts, their skills, their own little infra. And we'll come back to something healthier for the field.
I might be wrong, maybe it's too idealistic, but I think that's roughly how it plays out. We'll go back to a world where the best hunters find bugs because they understand the system and have the right tools to exploit it.
Vlogging my week
So I started a vlog to document my weeks a little, and the first one is out.
I added English subtitles but the content is in French. I'll see if enough English speakers start watching, and maybe make an English version with AI down the line.
Here's the link if you want to watch:
Either way I really enjoyed making it, except for the editing part, which bores me to death. But it makes me want to do more and share everything I'm working on and how my projects are moving along.
So YouTube will be the more personal side, and I'll keep the bug bounty and AI stuff here on the newsletter.
Comments