# Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions

> **Open Intelligence Dossier** · First detected: 2026-10-05 10:40 UTC · Category: Technology

## Executive Summary
Google has frozen its open-source bug bounty program amid a massive surge of invalid AI-generated vulnerability reports.

## Intelligence Brief
According to extensive reporting from outlets including TechCrunch, Tom's Hardware, IT Pro, BleepingComputer, Infosecurity Magazine, and AOL.com, Google has officially frozen and paused its open-source bug bounty program. The suspension specifically targets new product vulnerability reports and product flaw submissions. Coverage from IT Pro and Tom's Hardware points directly to a significant rise in automated submissions, characterized as AI slop and hallucinations, with maintainers reportedly drowning in invalid reports. The halt on product flaw submissions is scheduled to last until 2027. Various media sources have emphasized different aspects of this disruption.


TechCrunch and BleepingComputer frame the incident around an AI spam surge impacting security programs. Meanwhile, outlets such as ROCK 95.5, FOX Sports Radio, and The Patriot KEIB AM 1150 report simply that Google has shut down the bug bounty program due to bots. IT Pro highlights a direct statement explaining that the pause is due to a significant rise in automated submissions where the vast majority are not valid. NeoTeo specifically refers to the action as a pause on the Open Source Software Vulnerability Reward Program for new product reports, while Infosecurity Magazine describes it as a suspension due to AI vulnerability reports. This trend highlights a growing crisis in technology safety, with AOL.com noting that artificial intelligence is actively breaking one of the most critical ways the industry keeps technology safe.


Bug bounty programs rely on human security researchers to find and report genuine flaws in software. The influx of automated submissions, bots, and AI hallucinations overwhelms the systems and human maintainers tasked with reviewing the submissions. Observers and participants will need to watch for further announcements from Google regarding the mechanics of the Open Source Software Vulnerability Reward Program as the 2027 resumption date approaches. Coverage does not yet detail how other technology companies are adjusting their own security bounty programs to handle similar potential waves of artificial intelligence spam. Current reports remain strictly focused on the immediate freeze enacted by Google and the operational strain caused by invalid automated submissions across its platforms.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| AOL.com | AI is breaking one of the most important ways we keep technology safe | [Source Link](https://news.google.com/rss/articles/CBMif0FVX3lxTE9ldGZWdy13eVJ2ZE9DUURPMm9ERWdhaDZNZjFIcU91UzAxQWM1UGlDb2N1QXRMLUhfYW51N3FFSmF5NHMta1ZsTW9VdXhuSW5ybXA2WEJDWGNuTV9TMlpHd2ZQS3NRZGlmelNuMjJiWmM2R2lYOUtXcFdrb3Awd2s?oc=5) |
| ROCK 95.5 | Google Shuts Down Bug Bounty Program Due To Bots | [Source Link](https://news.google.com/rss/articles/CBMimwFBVV95cUxQNmNoeWV0WmROdGNyZDdlTzU4TEV0ampXa3NMWFpzZHFKU0FLMllFQ2xjQS1kYjIyR01xWnpyWTJrdmRtNm1yRlF6T3ctS0NLcHZGcHJGT0J4VjFmMDBlSU9VSUpQQzhpNDR3RmRpSEJIZnFHblVUcm1ZdUpVeHNaUFFyNTM1azhLSkRzY1RuQjNHNHdaSVVkTFRqaw?oc=5) |
| BleepingComputer | Google halts open-source bug bounty program amid AI spam surge | [Source Link](https://news.google.com/rss/articles/CBMirAFBVV95cUxObXNuRGM5SjNSczAxOEhpd0dUcjhsaXpVLUZwSENKelRCZmtWU1lyQ3loMGRKN1hQbHFUU2swVXY2SlJVam50Vmx2b0FpQTdVWi1QNTcta2pZb2NFRl9iNXk2M3Y3ZFJHdER1NGlnRHZGX1JwbUQzbDBEdXpyLTNpVG8xQ2hHLW5KQ3JiR2ZoMVYtWHU0Yi1ESVN0NlYtZlYxQzlNb2xlWUpEYkNN0gGyAUFVX3lxTE5TTk1HZUJnemZQNGhGSmJSNmR5X3kyU2E1a2pzb2dvd2poSUNVZVdMSjRZOGp1RXl5OU1FNmk3X0pGYXUxTllLNWI3aGYyWDZZdlZ3WWdNVDlkSTlPNkdLUmV5ZzAxMGFJUDRrUzZVU1cycjIxbHl2RnROX3B6TmppYmdkbF9ZVkxuTDZTaU9TYVdTU0tzaVNRVjQzM3l2VkZ4WWxlc1Z) |
| FOX Sports Radio | Google Shuts Down Bug Bounty Program Due To Bots | [Source Link](https://news.google.com/rss/articles/CBMipAFBVV95cUxQb0dVMzNuZW9RcTlYRDYzVkxQeFpubmx1RHBnNTZRaTZfZ185TEJIdzBSV1MzeTYwZVZFcXZZMDRWQ2gxb0VxT2cyT2xnaEdiWGs1aGtsd3dKcDdSaW1HZ2JRcm0xaXpvc0huVUxubGNJclFQekRadDNDUHZqeU5FUXJSRjhFQ0FaZC16UUhPRzdoY2dqMTZIQkIxT2NiVGk3elcxMw?oc=5) |
| Infosecurity Magazine | Google Suspends Open-Source Bug Bounty Due to AI Vulnerability Reports | [Source Link](https://news.google.com/rss/articles/CBMif0FVX3lxTE1GMmg5V1RUSnp1X1NTSWxmYkVQOC03d1BhSUloOVkwd2dSeWNYQVktenZwY2s3Qng2aEx1M2pFVUhwRDJEMWpyZHp0UVl6d25XZE9RaTdzN3pxd3NfdXZuMFIyMjBEbW1ZVnJxMjMyOHdCdWpNVGtMc01Qa2tIRmc?oc=5) |
| The Patriot KEIB AM 1150 | Google Shuts Down Bug Bounty Program Due To Bots | [Source Link](https://news.google.com/rss/articles/CBMingFBVV95cUxQb2JyOVpyOG5CZkN6LW4yQzFWZVRjQ0JKcXJRZVh3RDZsSEJ5aUoySGktTlEyNW1xRFNwY241a2FDNWR6TTRReE5NazYxYmZDT2pzZEowLVAxYzRaaURUekJjVWoyRjByWHprbzZaQ0hhNnN0R0JGU1d4UFFyemFIa2FmLWdGMjBxS3NEdUU1NjRqWFp5V05NcmF4ZzJLUQ?oc=5) |
| NeoTeo | Google's OSS VRP Pause on New Product Reports | [Source Link](https://news.google.com/rss/articles/CBMiogFBVV95cUxPV25aS1Vrd29oQnAybWVoQjV0MUZTZjlXMlA1RVktbVBPaHZoc0hzbmxqWWdiV09MN1h3bGhTS2JYc0dzMGFhdzFyLXhRckpIZEVYOG9wTmVrQldFVUw1ZjA4bEFoZWEyWU1iXzFGS256b0RNTmQ2SENXaXJHOWdKN2RON295YWY1NFVMNTd6Vnk2N1Jsc0ZFWk4yWWZJVzAwM2c?oc=5) |
| IT Pro | ‘This pause is due to a significant rise in automated submissions, the vast majority of which are not valid’: Google pauses open source bug bounty scheme over AI slop submissions | [Source Link](https://news.google.com/rss/articles/CBMivgJBVV95cUxNdHBHUU9HeDZLd04tRE1zNGdOUHozYjhocWllR1ZZRVo3UjdNU1RzVG1yWktLN0JBaEpXYlZrQTEzb3hXVDFTTnZRdm5zWGI5VnlYY2xuWUhxWUFhZ29fQ05Ld0xRWnB1Q21pdGkwd0dkcXRZanh4QVhFNG9JUkxQNFZnVi1nRDlWeFJsQTJZRk1nUzRoSDlkdXlOWlVJVzE3US1VZ0NPSm1weko2bkVhT3Bnb1BHOWJZN2g0cDRJQzV2U1Q3eEFUd1R0bElWRUNfSEVTQ3NpaUNwNnY5OU9EdXZxM09qQ2NWQmJTQjZyVXZYYVJuU3g0Q25NbklUMDIzYzJTRHhNRlVKZFJGbW9uaVdwb3h2WERmdGwybm9MN1NvZnROZGR6VlRXaEJDS3d1dllSYTlKc1gxNUpHcGc?oc=5) |
| Tom's Hardware | Google freezes open-source bug bounty program amid flood of invalid AI slop submissions — product flaw submissions halted until 2027 as maintainers drown in hallucinations | [Source Link](https://news.google.com/rss/articles/CBMiugJBVV95cUxOdl9WdlplbUl6TW9SVDV2T0czajVvN3hDVXB1emROaW5FVEs3MTI2MXAzYndQRGxyY3hwdXR1OTRwNTBYcm1pQ1FKMjVVS3ZLemlDeXVWSUtlVGVJendrNEY2eVprRk92OS1nY3haWXVOWmU0dnMzVVpxSWRPVTY3N0txMGp6SjU5TEY2V1UyNzhyU01TbWprUFl3ZVJjT3lxUlE1c2JQTzdmVUNQT05hcUZ2Ym5McURvcFc2c1lYNTgzZmVmSTdjNVltNUpqSlh4S19SWlRsTDlCdGdJb1I1OUpOT3BGWlpoa2I1OHFXdjkxTTBIUHBYVXV0czlmbHZkR2dNT2hKVUg1dHdlVkVuVmVrSjVwOHduQkdyRkdRbS05RlJGanJhMHhPSTNTcnZKb3FyeVBzOEF5Zw?oc=5) |
| TechCrunch | Google froze its open source bug bounty program due to a ‘significant rise’ in AI submissions | [Source Link](https://news.google.com/rss/articles/CBMixAFBVV95cUxNV2dhMWFWdURrUldZWDk3dkZzWkxGN1RZNW1KdUtObHFGalBUeDlXSlRaRUF5RTUwaWVWc1lZcUprVGhQS2lMcGMyU1l2dGxnMVIyMkg4UktuenFsaFBXcmNvNTlKUlhmcHE1MW1BVGFmME41TGJzbF8wMXRnRkdCUVgydDU1VUlseTRTbEJXalJkSTZYekVWUjFjOXpqZ0RRV25IQm9PZDZsa3d5cHQwWjd0SmZMREtGZmRFbThXekFzZWFa?oc=5) |

---
*Canonical Source: https://pulse.byoaiapps.com/trend/2026-10-05/google-froze-its-open-source-bug-bounty-program-due-to-a-significant-rise-in-ai*