Google has paused its open-source bug bounty program, citing a “significant increase” in AI-generated submissions. The program rewarded researchers for finding security vulnerabilities in the company’s open-source software. In statements on X and the program’s website, the company announced that the Open Source Software Vulnerability Rewards Program was suspended as of October 1 and promised an update in the first quarter of 2027. Google said the reason for the pause was a significant increase in automated submissions, the vast majority of which were invalid. According to Tom’s Hardware, engineers and open-source developers are overwhelmed by reports that are invalid or contain hallucinations. Last year, TechCrunch reported that cybersecurity experts had warned of similar risks. Participants are advised to consider Google’s other bug bounty programs in the meantime.
Why it matters
The decision shows how fragile the bug bounty model, which relies on a large pool of researchers, is in the face of mass-produced reports generated with AI. Those directly affected are independent security researchers who earn income by finding vulnerabilities in open-source projects; the company is directing them to its other programs for now, but it is unclear whether those channels can absorb the same level of interest. The fact that developers are overwhelmed by invalid reports shows that the real bottleneck is not the reward budget but the human labor needed to filter submissions. The confirmation of the warnings experts raised last year brings up the question of whether other companies’ similar programs are under the same pressure. How the update Google will deliver in the first quarter of 2027 will filter submissions remains unanswered for now.
Background
Google is not a new name in the FikirPilot archive: we have published 78 news stories featuring this name in the last 90 days, the most recent dated October 5, 2026.
Term: open source
Open source means that a software’s source code is accessible to everyone and that its license permits inspection, modification, and redistribution; it is not the same as being free of charge.