Google Pauses Its Bug Bounty as AI-Generated Reports Overwhelm the Queue

Google reportedly suspended part of its bug bounty program because AI-generated vulnerability reports flooded it with noise — one of several governance mechanisms now buckling under AI-scale output.

Google has paused its bug bounty over a flood of AI-generated reports, according to a roundup from @FadyEid. The mechanics are grimly predictable: bug bounty programs pay researchers for valid vulnerability disclosures, and AI tools now let anyone generate plausible-looking vulnerability reports at near-zero cost. The result is a signal-to-noise collapse, where the triage team spends more effort filtering machine-generated submissions than fixing real bugs.

Unlock the full briefing

Get every story in today's briefing, the full archive, and the daily AI intelligence brief.

All stories today

Full archive

Daily brief

Cancel anytime. Payments powered by Stripe.