GitHub Slashes Public Bug Bounty Payouts, Shifts Top Rewards to Invite-Only

GitHub will cut public bug bounty payouts by at least half starting July 27, 2026, with critical findings dropping from $20,000-$30,000+ to a fixed $10,000. Its permanent invite-only VIP tier will pay $30,000 or more for top reports. Reports filed before the deadline will retain previous payout terms.