Google Halts Open Source Bug Bounty Amid Surge in AI Reports

WHO:

TechCrunch - Google is the organization involved in the decision to freeze its open source bug bounty program.

Techmeme - Engineers and open-source maintainers are reportedly overwhelmed by the influx of reports.

WHAT:

TechCrunch - Google has frozen its open source bug bounty program due to a significant rise in AI submissions.

Techmeme - Google has officially suspended product flaw submissions to its OSS Vulnerability Reward Program.

Techmeme - The influx of reports includes thousands of sloppy submissions that are considered invalid.

WHEN:

Techmeme - Google plans to provide an update regarding the program by Q1 2027.

WHY:

TechCrunch - The decision to freeze the program is attributed to the overwhelming number of AI-driven reports.

HOW:

Techmeme - The method of submission for product flaws has been halted due to the influx of invalid reports.

(UPDATED October 4, 2026 21:26 UTC)

Google has decided to freeze its open source bug bounty program due to a significant rise in AI-driven submissions, which has overwhelmed engineers and open-source maintainers. As a result, the company has officially suspended product flaw submissions to its OSS Vulnerability Reward Program, citing thousands of invalid reports. Google plans to provide an update regarding the program by Q1 2027.