Google Pauses OSS VRP Bug Bounty Program

In a major shift for the open-source security community, Google has officially paused its Open Source Software Vulnerability Reward Program (OSS VRP). The program, which incentivized security researchers to find and report critical flaws in Google's open-source projects, is undergoing a strategic restructuring amidst a surge of low-quality, AI-generated bug reports.\n\nOur latest industry analysis covers the reasons behind Google's decision, the impact on independent security researchers, and how this pause highlights the growing challenge of triaging automated vulnerability submissions in enterprise bug bounty programs.\n\nRead the full analysis and community reactions on our official security portal.