Analysis · curated 16 Jul 2026
Bugcrowd policy changes to address "AI slop" submissions
First reported bugcrowd.com
Coverage timeline
Single-source analysis — first reported, latest, and curated coincide.
Why it matters
AI agents flooding bug-bounty programs with unverified, templated submissions degrade signal quality and strain triage teams, forcing platforms like Bugcrowd to tighten submission policies and detection to preserve trustworthy vulnerability reporting.
A Hacker News opinion piece argues that AI-assisted offensive security tools can rapidly generate vulnerability-looking output, but that findings still require human validation to prove exploitability and impact. It pairs with a Bugcrowd policy change addressing 'sloptimism'—a 334% surge in low-quality, AI-generated bug-bounty submissions driven by AI agents, sock-puppet accounts training AI on live triage, and automated bulk-submission pipelines.