GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier

GitHub has restructured its public bug bounty program, reducing payout amounts by at least 50% across all severity levels and shifting higher rewards to a private VIP tier. The change aims to reduce noise from low-quality or AI-generated reports while incentivizing high-quality research through exclusive access and larger rewards. This shift reflects broader industry trends as AI tools increase the volume of vulnerability findings, making triage and validation more critical. Human expertise remains essential for identifying complex, high-impact vulnerabilities that AI alone cannot reliably uncover.

AI-extracted · verify before operational use