GitHub restructures bug bounty into two tiers

GitHub will split its bug bounty program into a public and a private invitation-only tier starting July 27, 2026. The change follows a rise in low-quality, AI-generated reports. VIP researchers in the private program will earn roughly three to four times more per report than those in the public program.