Google pauses open source bug bounty program due to AI submission surge
Google has temporarily halted its open source bug bounty program due to a surge in AI-generated submissions. The suspension, which began on October 1, 2026, is expected to last until early 2027. According to TechCrunch, the program was overwhelmed by a flood of automated reports, most of which were deemed invalid.
The influx of AI-generated content reportedly included many hallucinations, or false information, which burdened engineers and maintainers. This issue had been anticipated by cybersecurity experts, who warned about the potential risks of AI-generated content in bug bounty programs.
Google plans to provide an update in the first quarter of 2027 and encourages participants to explore its other bug bounty initiatives during the interim. The decision highlights the challenges faced by tech companies as they navigate the integration of AI tools into their security processes.