The news
Three widely used open resources tightened access on September 30 and October 1, 2026. Reddit announced a Reddit API shutdown for public access, arXiv capped paper submissions and Google paused its open-source bug bounty, each pointing to automated traffic or low-quality submissions.
On September 30, Reddit told moderators and developers that RSS feeds will stop working on November 13, 2026, and that its public API will close in March 2027, TechCrunch reported. Decrypt reported that new public API requests stop on October 31, 2026, and that apps and bots wanting continued access must register and be approved by January 12, 2027. Reddit described RSS as a common surface for large-scale scraping and automated abuse, according to TechCrunch.
Reddit (RDDT) is also limiting Old Reddit, its legacy interface, to logged-in users who have used it in the past six months, TechCrunch reported. Decrypt said Reddit set up a $1 million App Migration Program that pays $1,000 to each eligible app moving to its Developer Platform, with applications closing November 30, 2026, and that about 14,000 apps and bots had registered so far.
On October 1, arXiv, the free preprint server where researchers post papers before peer review, began limiting each submitter to two new submissions per calendar month, The Register reported. That sits on top of an existing limit of three active submissions at any time. arXiv received 40,363 submissions in September 2026, compared with 20,569 in September 2024 and 9,869 in September 2016, according to The Register.
arXiv's Thomas Dietterich said a relatively small share of authors submit many low-quality papers and take up a disproportionate share of volunteer moderators' time, The Register reported. Times Higher Education quoted him saying some authors submit dozens of papers. The Register said arXiv describes the limit as temporary while it develops new submission practices.
Google stopped accepting new reports to its Open Source Software Vulnerability Rewards Program (OSS VRP) from October 1, BleepingComputer reported on October 5. Google said the pause was due to "a significant rise in automated submissions, the vast majority of which are not valid," according to the outlet. Reports filed before October 1 are unaffected, supply chain reports are still accepted, and Google's Patch Rewards Program and Cloud VRP continue. Google said it would share an update in the first quarter of 2027.
The numbers
- Reddit RSS feeds stop
- November 13, 2026
- Reddit public API closes
- March 2027
- arXiv submissions, September 2026
- 40,363
- arXiv submissions, September 2016
- 9,869
- Reddit 'other revenue', Q2 2026
- $43 million (+24% y/y)
- Google VRP payouts since 2010
- More than $81.6 million
Why CEOs should care
For product and data leaders, the Reddit changes come with hard dates. Any social listening tool, research workflow, AI assistant or retrieval system that reads Reddit through RSS or the unregistered public API needs an owner and a plan before October 31, November 13 and January 12. Ask vendors directly whether their Reddit data comes through an approved, registered channel or a licensing agreement, and what happens to your dashboards if it does not.
CFOs should treat free public data as a line item that may start costing money. Reddit's 'other revenue', outside advertising, grew 24% year over year to $43 million in the second quarter of 2026, mostly from AI licensing deals, TechCrunch reported. When a source can sell access, it has less reason to give it away, so budget for licensing or registered access instead of assuming scraping will keep working.
CISOs and engineering heads should read Google's pause as a warning for their own vulnerability programs. BleepingComputer noted that the curl project ended its HackerOne bounty in January over AI-generated reports and that Intel removed cash rewards from its Intigriti program in mid-September. If your company runs a bug bounty or a vulnerability disclosure inbox, ask how many recent reports were valid, how long triage takes, and whether rules on automated submissions need tightening. Research teams that publish on arXiv should also note that the limit applies per submitter.
The bigger picture
The common thread is cost. Open platforms built on the assumption that most traffic came from people are now paying for machine traffic, whether that is scraping, mass-produced papers or automated bug reports. Their answer is registration, quotas and paid access. Reddit has data deals with Google, reported by Decrypt at about $60 million a year, and with OpenAI, and it has sued Anthropic and Perplexity over scraping, according to Decrypt.
For companies that built products on freely available web data, the era of unmetered access is narrowing. Expect more sources to require accounts, set limits per user and charge for bulk access.
What’s next
Watch Reddit's dates: new public API requests stop October 31, RSS ends November 13, migration fund applications close November 30, registration is due January 12, 2027, and remaining public access ends in March 2027. Google has promised an update on its open-source bug bounty in the first quarter of 2027, and arXiv says its cap is temporary.
What “Fact-checked” means
Fact-checking means testing a story’s facts against the evidence before it is published. This story went through at least two separate checks before this version was published.
- What we checked
- Its names, figures, dates, job titles, quotes and who said what were checked against the story’s sources, including its main source where it could be opened. The headline was checked for accuracy and overstatement.
- How
- A first check reviewed the whole story. If it passed, a second, skeptical check went back to the sources to look for mistakes in the most important facts. If a check flagged the story, it was edited to fix the problems found, and a separate re-check then reviewed the whole story again.
- Who
- The checks are made by our newsroom, as steps kept separate from the writing, under rules set by our editor, Hussein Mukhtar. A story the checks still flag is held for the editor, who decides whether it is fixed, published or dropped.
- If something is wrong
- “Fact-checked” does not mean error-free. If a material error is found after publication, we correct the story and add a note saying what changed. Report an error
Companies in this story
