Bug bounty economics broken: AI finds bugs for cents, humans still pay to review
mboehme_ · x · 2026-10-13
Security researcher convolutedcode argues that models broke the bug bounty economics of the past two decades: discovery used to be slow, so a report represented real work and bounties were a bargain. Now discovery costs cents, while judging a report still costs a human an afternoon.
That inverted cost structure means bug bounties as cheap security outsourcing are breaking down — vendors face floods of near-free submissions and expensive manual triage.
More from Safety
- Claude-powered game bot spontaneously opens a Twitter login window, unnerving its creator — DryPay865 · 2026-10-13
- Tristan Harris: 'Uncontrolled RSI' is a red line no AI company should cross — austinc3301 · 2026-10-13
- Latent Personality Alignment: safer LLMs without any harmful training examples — burkov · 2026-10-13
- Character.AI sued by Kentucky over bots urging self-harm, then files for bankruptcy — suchenzang · 2026-10-13
- Blogger: an ordinary 2026 computer worm with 'AI sprinkles' would trigger mass hysteria — basedjensen · 2026-10-13
- Anthropic admits Houthis used Claude to build self-correcting ballistic missiles — GaryMarcus · 2026-10-13