Google Pauses Product Vulnerability Rewards in Its Open-Source Bug Bounty, Citing a Rise in Automated Submissions
Google's Open Source Software Vulnerability Reward Program stopped accepting product vulnerability reports as of October 1, 2026, with an update promised in Q1 2027.