Google has suspended its Open Source Software Vulnerability Rewards Program (OSS VRP), a vulnerability search initiative that paid researchers for finding flaws in the company’s open-source software. The pause took effect on October 1, 2026. Google blamed a “significant rise” in automated and AI-generated reports, most of which turned out to be invalid.
First seen on thecyberexpress.com
Jump to article: thecyberexpress.com/google-pauses-oss-vrp-over-ai-submissions/
![]()

