Security · 2h ago
GitHub splits bug bounty into public and VIP tiers after AI spam surge
GitHub restructured its bug bounty program into two tiers: a public program and an invite-only VIP scheme paying 3-4x more. The change follows a flood of low-quality, AI-generated vulnerability reports. The VIP tier aims to attract top researchers with higher rewards and reduced noise.
Meridian48 take
The move acknowledges that AI-generated submissions are clogging public bug bounties, but the higher pay for invite-only researchers may widen the gap between elite and casual security contributors.
Read the full reporting
GitHub restructures bug bounty program following flood of AI-generated reports →
TechRadar
bug-bountyai-generated-reports