Google Online Security Blog: Security Reward Programs: Year in Review, Year in Preview

Security Blog

The latest news and insights from Google on security and safety on the Internet

Security Reward Programs: Year in Review, Year in Preview

2015年1月30日

Posted by Eduardo Vela Nava, Security Engineer Security Reward Programs

Security researchers should be rewarded for helping us protect Google's users.

Researchers help us understand how to make Google safer by discovering, disclosing, and helping fix vulnerabilities at a scale that’s difficult to replicate by any other means.

Looking back on 20142014

We paid researchers more than $1,500,000.

Our largest single reward was $150,000. The researcher then joined us for an internship.

We rewarded more than 200 different researchers.

We rewarded more than 500 bugs. For Chrome, more than half of all rewarded reports for 2014 were in developer and beta versions. We were able to squash bugs before they could reach our main user population.

The top three contributors to the VRP program in 2014 during a recent visit to Google Zurich: Adrian (Romania), Tomasz (Poland / UK), Nikolai (Ukraine)

What’s new for 2015

We'll publish different types of vulnerabilities, products and services for which we want to support research beyond our normal vulnerability rewards.