Google Bug Bounty Program

Google has paused its open source bug bounty program after a sharp rise in submissions generated with the help of AI tools. The company says many automated reports are low-quality duplicates that waste reviewers' time, so it is halting new entries while it reassesses how to handle AI-assisted vulnerability reports. Security researchers are watching to see how the program restarts.

Google is restricting eligibility in its open source bug bounty program, citing a flood of invalid automated reports flooding its security team. The change means many AI-generated or low-quality vulnerability submissions will no longer qualify for rewards. Security researchers are debating whether the move will protect triage resources or discourage legitimate findings at a time when automated tools are producing huge volumes of dubious reports.

Google has suspended its open-source bug bounty program, citing the volume of vulnerability reports generated by artificial intelligence tools. The company said AI-assisted submissions have flooded the program with low-quality or invalid reports, making it difficult for reviewers to identify genuine security flaws. The move has drawn attention from security researchers, who are debating how bug bounty programs should adapt to AI-generated submissions.

Google has paused its open source bug bounty program after being overwhelmed by a flood of AI-generated vulnerability reports. The company says automated tools have produced so much low-quality or invalid submissions that triaging genuine bugs became impractical. The move highlights a growing problem for security teams as AI makes it cheap to mass-produce plausible-looking but often useless bug reports.

Google has temporarily paused its open source bug bounty program, citing a surge in low-quality AI-generated vulnerability reports. The program paid researchers for finding security flaws in Google's open source projects. The pause suggests AI tools are flooding security teams with automated submissions that are difficult to review, raising concerns across the security research community about how bounty programs will handle AI-driven noise.