CYBERVERTEX

OpenAI and Poland's NASK agree to explore joint AI safety research

A new agreement pairs OpenAI with Poland's NASK research institute to explore AI evaluation and safeguards, but measurable outcomes from the new collaboration remain ahead.

What happened

OpenAI announced on October 23 that it had signed an agreement with Poland's NASK National Research Institute to explore work on AI safety, security and technical research. NASK's AI Safety Research Center serves as Poland's AI safety institute. According to the announcement, the intended areas include evaluating increasingly capable systems, identifying vulnerabilities and improving safeguards. Independent reporting by TECHi on the same date confirms the agreement and notes that the announcement does not identify a budget, timetable or defined research deliverables. The organizations have an earlier practical connection: CERT Polska, which operates within NASK, used access to OpenAI cyber-capable models in July to help find six vulnerabilities in MikroTik RouterOS. OpenAI says the vendor fixed those issues and CERT Polska checked that the fixes addressed the observed attacks. That earlier work is relevant background, but it is not a result produced by the newly announced agreement.

Why it matters

AI safety evaluation becomes more useful when results can be examined outside the organization developing the models. Public research institutions may bring different threat perspectives, operational experience and national-language contexts to testing. The Polish partnership also places cybersecurity alongside broader questions about how capable AI systems should be assessed. However, signing an agreement is not equivalent to demonstrating that a model is safer. The announcement sets out topics for cooperation, not a published experimental protocol or an independently validated improvement. The previous router-vulnerability work shows that AI-assisted defensive research can lead to concrete fixes, but it cannot establish how future evaluations will be conducted or reported. Distinguishing an institutional commitment from an observable security outcome is essential when assessing progress.

What to watch next

Look for named joint research projects, published evaluation methods, reproducible findings and documented remediation of newly discovered problems. Disclosure rules and the independence of reviewers will matter as much as the number of studies announced. Any future claims of improved safeguards should identify the systems tested, the conditions of testing and remaining limitations. Also watch whether NASK and OpenAI publish information that other national AI safety institutes can compare. Until those details appear, the most defensible assessment is that the partnership expands the opportunity for external research rather than proving a specific safety gain.

Reality check. OpenAI's dated October 23 announcement and TECHi's independently published October 23 report corroborate the agreement and its exploratory scope. The new partnership has no publicly specified budget, timetable or deliverables in these sources. The July router-vulnerability results predate the agreement and are not attributed to it.
Sources and further reading

← Back to archive