Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions
techcrunch ·
Google has temporarily suspended its Open Source Software Vulnerability Rewards Program due to a substantial increase in automated submissions generated by artificial intelligence. The company announced the pause on October 1, stating that the vast majority of these new reports were invalid or contained hallucinations, which overwhelmed engineers and maintainers. This decision follows earlier warnings from cybersecurity experts regarding the risks AI poses to bug bounty ecosystems. Google plans to provide an update on the program's status during the first quarter of 2027. In the interim, researchers are encouraged to participate in other active Google bug bounty initiatives instead. The move highlights growing challenges in managing high-volume, low-quality inputs in security testing environments.
techcrunch