Stingrai’s census of 53 bug bounty and vulnerability disclosure policies, including 29 open-source projects, finds that none ban AI-written reports outright while most policies are silent, leaving maintainers and coordinators to manage AI-assisted security submissions with limited explicit rules.
Who Actually Bans AI-Written Bug Reports? 2026 Census
Stingrai's census of 53 bug bounty and vulnerability disclosure policies, including 29 open-source projects, finds that none ban AI-written reports outright while most policies are silent, leaving maintainers and coordinators to manage AI-assisted security submissions with limited explicit rules.
Source: Stingrai