Github Revamps Bug Bounty System Amid Surge of AI Reports

WHO:

TechRadar - GitHub is the organization involved in the restructuring of its bug bounty program.

Techmeme - The article mentions "invite-only researchers" as a specific group benefiting from the new program.

WHAT:

TechRadar - GitHub is restructuring its bug bounty program.

TechRadar - The new program splits off open, public bug bounty programs from an invite-only scheme.

Techmeme - The invite-only scheme pays around 3-4 times more than the public program.

Techmeme - GitHub is implementing new limits on first-time researchers.

WHERE:

TechRadar - The changes are being made by GitHub, which operates online.

WHEN:

Techmeme - The article does not specify a date for the implementation of the new bug bounty program.

WHY:

Techmeme - The restructuring is in response to a flood of AI-powered reports.

HOW:

TechRadar - GitHub is creating a two-tier bug bounty program that differentiates between public and invite-only researchers.

Techmeme - The biggest rewards will be reserved for a hand-picked group of proven hunters.

(UPDATED July 24, 2026 16:26 UTC)

GitHub is restructuring its bug bounty program to create a two-tier system that separates public submissions from an invite-only scheme, which will offer significantly higher rewards. This new program is designed to address the influx of AI-powered reports and will provide invite-only researchers with payouts that are about three to four times greater than those of the public program. Additionally, GitHub is implementing new limits on first-time researchers to ensure the quality of submissions in this revamped initiative.