Google, blaming a “significant increase” in AI filings, has paused its open source bug bounty program until next year.
Last year, TechCrunch reported that Cybersecurity experts warned that the fall of AI posed a serious risk to bug bounty programs.. It seems that’s the problem facing Google’s Open Source Software Vulnerability Bounty Program, where researchers were rewarded for finding vulnerabilities in the company’s open source software.
In publications in X and the program websiteGoogle said the bug bounty program was suspended as of October 1, with a promise to provide “an update” in the first quarter of 2027. According to Tom’s HardwareGoogle engineers and open source maintainers were overwhelmed by reports that were invalid or contained hallucinations.
“This pause is due to a significant increase in automated submissions, the vast majority of which are invalid,” the company said.
In the meantime, participants are encouraged to consider other Google bug bounty programs.