Google Awards $11.8 Million in 2024 for Identified Security Vulnerabilities

Google has paid $11.8 million in 2024 to security researchers and ethical hackers for identifying vulnerabilities in its products and services. The company’s bug bounty programs, such as the Android and Google Devices Security Reward Program and the Google Mobile Vulnerability Reward Program, distributed more than $3.3 million in rewards. Despite an 8% decrease in reported vulnerabilities, there was a 2% increase in those classified as critical or high severity. Google attributes this to improved security measures, making it harder for researchers to find significant flaws. The highest rewards include up to $300,000 for mobile security issues and $250,000 for Chrome vulnerabilities. The company received 337 verified reports of unique Chrome vulnerabilities, leading to $3.4 million in payouts to 137 different researchers. The approach underscores the effectiveness of financial incentives in enhancing cybersecurity and reducing potential threats. Google continues to evolve its security strategies, including phasing out less secure authentication methods and implementing advanced protective measures.