Google Suspends Open Source Bug Bounty Program Due to AI-Generated Reports
Google has paused its Open Source Software Vulnerability Reward Program (OSS VRP) following a significant increase in invalid, AI-generated submissions. The company plans to reassess the program in the first quarter of 2027.
First reported 2 days ago · latest update 1 hour ago
Get started with free access to reviews, badges and discussions.
Unlock exclusive tools and insights for enthusiasts who want more.
Access Bench, Roadmaps, deep analysis and other exclusive tools.
Dive into our proprietary testing data and compare hardware with detailed benchmarks.
Go beyond the headlines with expert reporting on the hardware industry.
Track upcoming CPUs, GPUs and tech releases before they arrive.
In-depth features, interviews and insider stories from the world of hardware.
Expert insights and analysis delivered to your inbox.
Your membership journey starts here.
Keep exploring and earning more as a member.
News, reviews, and technical insights.
Reviews, benchmarks, and updates on current GPUs.
Explore your membership benefits.
Keep exploring with your premium access.
Join for quick access. Enter your email below and we'll send confirmation plus sign you up to our newsletter.
By submitting your information, you confirm you are aged 16 or over, have read our Privacy Policy and agree to the Terms & Conditions. Geographical rules apply.
Get full access to premium articles, exclusive features and a growing list of member rewards.
Etiido Uko is a news contributor for Tom's Hardware covering the latest updates in big tech and the PC industry. He is a mechanical engineer and senior technical writer with over nine years of experience in documentation and reporting. He is deeply passionate about all things engineering and technology, and is an expert in gadgets, manufacturing, robotics, automotive, and aerospace.
Citations · 3 reports from 3 outlets
Tap a citation to read it above, right here on T.A.M.
Google freezes open-source bug bounty program amid flood of invalid AI slop submissions
Google suspends product vulnerability submissions to its Open Source Software Vulnerability Reward Program (OSS VRP) over an influx of invalid AI-driven reports.
2 days ago · Etiido UkoGoogle froze its open source bug bounty program due to a ‘significant rise’ in AI submissions
AI slop seems to be overwhelming bug bounty programs.
19 hours ago · Anthony HaGoogle benches open source bug bounty program following ‘significant rise’ in AI submissions
Google says it will reassess in Q1 2027.
1 hour ago · Sead Fadilpašić