NEW RUNTIME
Raw SignalOct 6, 20261 min read1 source

Google Open Source Software Vulnerability Reward Program Rules - Rules - Rules & Rewards

In one minute

Google’s Open Source Software Vulnerability Reward Program rules say that, as of October 1, 2026, the program no longer accepts product vulnerability submissions.

The rules say some reports affecting Google Cloud products may still be accepted through the Cloud VRP. Google directs researchers to other VRP programs or the Patch Rewards Program and says the change does not affect product-vulnerability reports submitted before October 1, 2026. The company says it will provide an update on this part of the program in Q1 2027. The same rules continue to identify supply-chain compromises as a priority category.

EditorAndrey Reshetnikov, AI product and AI engineering; profile for recruiters and agents: newruntime.com/owner-profile.json

  1. Oct 16, 2026Salience must prove its switch improves the whole fabricgoogle
  2. Oct 14, 2026Argon’s wider launch tests whether safety gates can scalegoogle
  3. Oct 14, 2026Argon’s global rollout outruns the evidence on what it can safely dogoogle

Evidence / sources

  1. 1bughunters.google.com/about/rules/open-source/google-open-source-software-vulnerability-reward-program-rules
All Raw Signals

Next reads

Read next

Open the graph
  1. 01topicGoogleExplore the google topic hub.
  2. 02archiveRaw SignalsOpen every source-linked raw signal.
  3. 03source ledgerSource LedgerInspect the public source evidence graph.
Who read this page?Machine requests, hidden until opened

Loading the privacy-safe route aggregate...

Open the JSON contract