- Google Bug Bounties Watch 660 Researchers get a share of $ 11.8 million in 2024
- Chrome and Android VRPs were lucrative
- Google’s VRP program will be 15 next year
Google has revealed that it paid $ 11.8 million in Bug coatings in 2024, with payments that go out to 660 security researchers, corresponding to a theoretical average of about $ 18,000 each.
Its highest payout in 2024 was $ 110,000, with its total payment to date, which now stood at $ 65 million since 2010.
Chrome researchers and those who reveal vulnerabilities in Android and other Google devices accounted for about half of 2024’s payments, marking the company’s commitment to security within its most popular devices.
Google paid 12 million dollars in bug benefits last year
Some changes in the structures last year resulted in higher payout potentials, with Google VRP now paid up to $ 151,515, $ 300,000 for the mobile VRP, $ 151,515 for Cloud VRP and $ 250,000 for the Chrome Awards.
In a blog post, Google’s Dirk Göhmann said that scientists who contributed to the Android and Google Devices Security Relous program and Google Mobile Woundability The Rewards received over $ 3.3 million in rewards in 2024, adding that 8% fewer reports were logged. However, the company saw a less 2% increase in critical and high vulnerabilities.
A total of 337 unique reports were made to Chrome VRP – 137 received rewards of a total of $ 3.4 million.
Google also celebrated the launch of a new category -2024 was the first full year of AI -Bug coatings, but payouts remained relatively low to $ 55,000.
Other successes include two bugswat events and four initiatives in support of the next generation of security researchers.
Looking ahead, Göhmann noticed that the company will celebrate 15 years of VRP in 2025 – it is unclear if changes will be made to its VRPs to commemorate this milestone.
Göhmann added: “We will send a huge thank you to our Bug Jæger Society to help us make Google products and platforms safer and secure for our users around the world -and invite researchers who are not yet engaged with vulnerability rewarding program to join our mission to keep Google safe!”
