Analysis
Bugcrowd policy changes to address "AI slop" submissions
Publication date not yet evaluated · Added bugcrowd.com
Page published
Coverage timeline
Single-source analysis — one report is available.
Why it matters
AI agents flooding bug-bounty programs with unverified, templated submissions degrade signal quality and strain triage teams, forcing platforms like Bugcrowd to tighten submission policies and detection to preserve trustworthy vulnerability reporting.
A Hacker News opinion piece argues that AI-assisted offensive security tools can rapidly generate vulnerability-looking output, but that findings still require human validation to prove exploitability and impact. It pairs with a Bugcrowd policy change addressing 'sloptimism'—a 334% surge in low-quality, AI-generated bug-bounty submissions driven by AI agents, sock-puppet accounts training AI on live triage, and automated bulk-submission pipelines.