Google Online Security Blog: Security Reward Programs: Year in Review, Year in Preview

Security Reward Programs: Year in Review, Year in Preview

30 януари 2015 г.

Posted by Eduardo Vela Nava, Security Engineer Security Reward Programs

Security researchers should be rewarded for helping us protect Google's users.

Researchers help us understand how to make Google safer by discovering, disclosing, and helping fix vulnerabilities at a scale that’s difficult to replicate by any other means.

Looking back on 20142014

We paid researchers more than $1,500,000.

Our largest single reward was $150,000. The researcher then joined us for an internship.

We rewarded more than 200 different researchers.

We rewarded more than 500 bugs. For Chrome, more than half of all rewarded reports for 2014 were in developer and beta versions. We were able to squash bugs before they could reach our main user population.

The top three contributors to the VRP program in 2014 during a recent visit to Google Zurich: Adrian (Romania), Tomasz (Poland / UK), Nikolai (Ukraine)

What’s new for 2015

We'll publish different types of vulnerabilities, products and services for which we want to support research beyond our normal vulnerability rewards.