GitHub revamps bug bounty program with new VIP tier, payout changes

GitHub is revamping its bug bounty program with a new VIP tier and payout changes to reward higher-quality vulnerability reports and reduce low-effort submissions, including AI-generated reports, effective July 27, 2026. The company cited a sharp increase in submissions lacking real security impact, such as those without proof of concept or theoretical attack scenarios.

GitHub is changing its bug bounty program to reward higher-quality vulnerability reports and reduce low-effort submissions, including AI-generated reports. The changes will take effect on July 27, 2026. Reports submitted before that date will be honored under the previous bounty structure. “Alongside the growth in legitimate reports, we’ve seen a sharp increase in submissions that don’t demonstrate real security impact. These include reports without a proof of concept, theoretical attack scenarios that don’t hold up … More https://www.helpnetsecurity.com/2026/07/23/github-bug-bounty-program-changes/ The post GitHub revamps bug bounty program with new VIP tier, payout changes https://www.helpnetsecurity.com/2026/07/23/github-bug-bounty-program-changes/ appeared first on Help Net Security https://www.helpnetsecurity.com .