GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier
Platform shifts to restrictive VIP-led security model as standard bounty payouts see drastic reductions.
Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity level. Critical findings will drop from $20,000-$30,000+ to a fixed $10,000, while its permanent invite-only VIP tier will pay $30,000 or more. Reports filed before that date, in...
The Hacker News
Source

Generated insight by OnAirToday AI
This shift towards an invite-only model signals a strategic pivot to prioritize deeper security research from vetted professionals over broad crowdsourced testing. While it optimizes costs, it risks discouraging the wider community of ethical hackers who identify critical vulnerabilities that secure the global software supply chain.

Comments
Keep comments relevant and respectful. No links, advertising, self-promotion, or spam.