GitHub Slashes Public Bug Bounty Payouts as AI Report Flood Buries Its Security Team

GitHub Slashes Bug Bounty Payouts to Combat AI Report Flood

GitHub has shaken up its long-running bug bounty program. The changes come as the Microsoft-owned platform grapples with a surge in low-quality submissions. Many appear generated by artificial intelligence tools. The overhaul splits the program into two tiers. Public reports face sharp cuts in rewards. A select group of proven researchers gains access to an invite-only VIP track with far higher payouts. The adjustments take effect July 27, 2026.…

GitHub restructures bug bounty program following flood of AI-generated reports

GitHub to launch two-tier (public and private) bug bounty schemes form July 27 2026Change comes in response to rise in lower-quality, AI-generated reportsVIP researchers will earn around 3-4x more per reportGitHub has confirmed plans to evolve its bug bounty program into a two-tier system, which will come into force for reports submitted on or after July 27, 2026.Under the new scheme, the Microsoft-owned coding platform will add a lower-paying p…

GitHub slashes public bug bounty payouts as AI report flood buries its security team

GitHub has decided that, if everyone with an AI chatbot can file a bug bounty report, it may as well stop paying them like seasoned security researchers. Starting July 27, the Microsoft-owned code forge is overhauling its bug bounty program with a two-tier system that cuts rewards for public submissions while dangling much fatter payouts to a new invite-only group of researchers with proven track records. At the same time, newcomers will find th…

The Register: GitHub slashes public bug bounty payouts as AI report flood buries its security team

The Register: GitHub slashes public bug bounty payouts as AI report flood buries its security team. “Starting July 27, the Microsoft-owned code forge is overhauling its bug bounty program with a two-tier system that cuts rewards for public submissions while dangling much fatter payouts to a new invite-only group of researchers with proven track records.”

How AI Slop Is Forcing GitHub To Close Its Doors

From 27 July 2026, GitHub plans to give public security researchers a rather abrupt reality check on what they can earn. Compensation for public researchers drops at every level, capping critical discoveries at $10,000 rather than $30,000 and high-severity findings at $5,000. Medium and low-severity payouts fall to $2,000 and $250 respectively. At the same time, the company is introducing an exclusive VIP programme, directing premium rewards abo…