Why Google Paused Its Open-Source Bug Bounty Program Amid AI-Generated Submissions
5d · Santosh Kadali · analyticsinsight · News

Overview: Google paused new product vulnerability submissions to its OSS VRP on October 1, 2026, after a sharp rise in automated reports, most of them invalid.The pause is not a full shutdown. Existing reports, supply-chain bug reports, the Patch Rewards Program, and other Google reward programs remain open.Curl and…