Google Bug Bounty Program

Google has temporarily paused its open source bug bounty program, which paid researchers for finding vulnerabilities in open source projects, after a surge in submissions generated by artificial intelligence tools. The company says many AI-written reports are low quality and waste reviewers' time. Security researchers are debating how bounty programs should handle automated submissions and verify genuine human findings.

Google is restricting eligibility in its open source bug bounty program, citing a flood of invalid automated reports flooding its security team. The change means many AI-generated or low-quality vulnerability submissions will no longer qualify for rewards. Security researchers are debating whether the move will protect triage resources or discourage legitimate findings at a time when automated tools are producing huge volumes of dubious reports.

Google has suspended its open-source bug bounty program, citing the volume of vulnerability reports generated by artificial intelligence tools. The company said AI-assisted submissions have flooded the program with low-quality or invalid reports, making it difficult for reviewers to identify genuine security flaws. The move has drawn attention from security researchers, who are debating how bug bounty programs should adapt to AI-generated submissions.

Google has paused its open source bug bounty program after being overwhelmed by a wave of AI-generated vulnerability reports. The automated submissions have flooded reviewers with low-quality, often invalid findings, making the program difficult to manage. The move highlights a growing problem for security teams as generative AI tools make it easy to mass-produce bug reports that look plausible but waste researchers' time.

Google has temporarily paused its open source bug bounty program, citing a surge in low-quality AI-generated vulnerability reports. The program paid researchers for finding security flaws in Google's open source projects. The pause suggests AI tools are flooding security teams with automated submissions that are difficult to review, raising concerns across the security research community about how bounty programs will handle AI-driven noise.

Google has frozen its open source bug bounty program, citing a significant rise in submissions generated with the help of AI. The company says automated, low-quality vulnerability reports are overwhelming reviewers, making it harder to identify genuine security flaws. The move highlights a growing problem across the security industry as AI tools make it easy to mass-produce plausible-looking bug reports.

Google has temporarily paused its open-source bug bounty program, which paid researchers for reporting vulnerabilities in open-source projects. The company cited an explosive surge in submissions as the reason, and reports suggest the volume of reports has left the program unable to keep up while Google reviews how to handle the influx.