Google Halts Open Source Bug Bounty Program Amid AI Submission Surge

Google Pauses Bug Bounty Program

Tech giant Google has announced the temporary suspension of its open source bug bounty program, effective October 1, 2026. The decision comes in response to a significant increase in submissions generated by AI, many of which have been deemed invalid or based on false information.

Escalating Issues with AI Submissions

According to reporting by TechCrunch, cybersecurity experts had previously raised concerns that inaccuracies stemming from AI-generated content could undermine the integrity of bug bounty programs. Google’s Open Source Software Vulnerability Rewards Program allows researchers to earn rewards by identifying vulnerabilities in the company's open source software.

However, the overwhelming number of submissions, which often consisted of hallucinated or incorrect claims, has forced Google to reassess its approach to the program. In a statement on platforms such as X, the company noted, "This pause is due to a significant rise in automated submissions, the vast majority of which are not valid."

Future Plans and Alternatives

Google has committed to providing an update on the status of the program in the first quarter of 2027. In the meantime, the company encourages contributors to explore its other bug bounty programs that remain operational.

The challenge that Google faces with its open-source bug bounty program highlights the broader issues confronting cybersecurity in an age increasingly influenced by AI technologies. Understanding and mitigating the risks posed by automated submissions will be crucial for the success of such programs in the future.