Google open source bug bounty program

Google is suspending part of its bug bounty program covering open source projects. The move means security researchers will temporarily no longer be rewarded for reporting certain vulnerabilities in Google's open source software. The announcement is drawing attention from the security community, with researchers questioning the implications for vulnerability disclosure and Google's commitment to open source security.

Google has stopped accepting vulnerability reports for open-source software through its bug bounty program as of October 1. The company will temporarily no longer pay rewards for product flaws found in open-source projects, though reports on its own flagship products continue. The move is drawing attention in the security community, as the open-source incentive program was seen as an important way to support researchers auditing widely used projects.

Google has paused its open source bug bounty program following a sharp rise in submissions generated by artificial intelligence tools. The company says the volume of low-quality, AI-written reports has made the program difficult to manage, prompting a temporary halt while it reassesses how to handle the influx.

Google has temporarily stopped accepting product vulnerability reports under its bug bounty program for open-source software as of October 1st. The pause means security researchers can no longer submit findings for Google open-source projects for the time being. The company has not fully explained the reasons, and observers are watching whether the program will resume and what the move means for open-source security research.

Google has suspended its open source bug bounty program, citing a significant rise in AI-generated vulnerability submissions. The company says many of the reports flooding in are low-quality, machine-written findings that take up valuable reviewer time without adding real security value. The move has sparked debate among security researchers about the impact of automated tools on responsible disclosure programs and how bounty platforms should handle AI-created noise.

Google has suspended its open-source bug bounty program, citing a surge of vulnerability reports generated by AI tools. According to Infosecurity Magazine, the company said low-quality, automated submissions have overwhelmed reviewers, making the program unsustainable in its current form. Security researchers are debating whether AI-generated reports are diluting bug bounty programs across the industry and how platforms should filter them.

Google has paused its open source bug bounty program, citing a surge of submissions generated by AI tools. Low-quality automated reports are reportedly overwhelming reviewers, prompting the company to halt new submissions while it reassesses how to handle the influx. Security researchers are watching closely, as the decision raises broader concerns about AI-generated spam affecting vulnerability disclosure programs.