Skip to content
AI News HubLIVE
More
Summary only

GitHub will start paying some bug bounty hunters in swag instead of cash

Bug bounties have served as one of cybersecurity's core pressure valves for decades, giving independent researchers a structured way to disclose vulnerabilities before attackers can exploit them. But a deluge of AI-assisted reports is upending parts of that system.

SourceThe New Stack AIAuthor: Paul Sawers
GitHub will start paying some bug bounty hunters in swag instead of cash
Report an error

The correction channel is not available yet. You can copy the article reference below for later.

Correction instructions

Summary only

Under the source content permission, this page provides an editorial summary, key points, and a link to the original article.

Key points and analysis

Article intelligence

EngineersIntermediate

Key points

  • GitHub tightens bug bounty standards, requiring proof-of-concept and security impact validation.
  • Lower-severity findings may be compensated with company swag instead of cash.
  • AI-assisted report surge slows triage but GitHub welcomes validated AI findings.
  • Similar issues led cURL to shut down its bug bounty program; GitHub aligns with its stance.

Highlights and analysis are generated automatically and may contain errors. Check the original source.

More recent stories on this topic · Agents