Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions
Google paused its Open Source Software Vulnerability Rewards Program on October 1 due to a significant rise in invalid AI submissions. The company stated that most automated reports were not valid, overwhelming engineers and maintainers. Google plans to provide an update in the first quarter of 2027, while encouraging participants to explore other bug bounty programs.