logo

Poking holes in Google tech bagged bug hunters $10M

ID: 6c037542-4542-5283-8f7d-fbfe7a1b59ba

STIX ID: report--6c037542-4542-5283-8f7d-fbfe7a1b59ba

Feed Name: The Register (Security)

Date Published: 2024-03-13

Date Updated: 2026-04-26

Author: Jessica Lyons

...
...

Google’s 2023 Vulnerability Reward Programs paid $10 million to 632 researchers, with notable expansions into AI products, Android apps, and Wear OS, plus new bonus incentives and live hacking events. Chrome VRP awarded $2.1 million for 359 unique vulnerabilities and introduced rewards targeting MiraclePtr bypasses and full-chain exploits. The report contrasts payouts with Microsoft’s totals and includes industry criticism from Katie Moussouris questioning whether bug bounties measurably improve software security.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.