Google paid out over $10 million in bug bounties last year

Happy man making money using his laptop
(Image credit: Shutterstock / pathdoc)

Google has announced that it paid out $10 million as part of its bug bounty program in 2023, its second-biggest year ever and bringing its total rewards since 2010 to $59 million.

Last year, the company’s $10 million was directed to a total of 632 researchers across 68 countries, with the highest payout coming in at a life-changing $113,337 as Google looked back its commitment to cybersecurity.

The annual initiative, part of Google’s Vulnerability Reward Program (VRP), aims to identify and address vulnerabilities in the company’s products and services by collaborating with the global bug hunter community, making the move a win-win for both teams.

Google just had its second-biggest year for bug bounties

The 2023 program saw several enhancements and changes, including the introduction of the Bonus Awards program, offering time-limited extra rewards for reports to specific VRP targets. The program was also expanded to Chrome and Cloud, with mobile users also benefitting from the launch of Mobile VRP, an initiative that focuses on first-party Android apps.

Around one-third ($3.4 million) of the company’s 2023 payout went to the discovery of bugs affecting Android apps and other Google Device flaws, while a total of 359 unique reports addressed Chrome bugs.

Another category expected to experience significant growth over the coming years will be AI, with the California company publishing specific guidance for AI-related bugs and hosting an LLM-specific event.

A statement in the announcement reads: “Our ongoing mission is to stay ahead of emerging threats, adapt to evolving technologies, and continue to strengthen the security posture of Google’s products and services.”

Google also thanked the developer and bug hunter communities for their ongoing work, highlighting some key discoveries of 2023.

More from TechRadar Pro

Craig Hale

With several years’ experience freelancing in tech and automotive circles, Craig’s specific interests lie in technology that is designed to better our lives, including AI and ML, productivity aids, and smart fitness. He is also passionate about cars and the decarbonisation of personal transportation. As an avid bargain-hunter, you can be sure that any deal Craig finds is top value!

Read more
Application Security Testing Concept with Digital Magnifying Glass Scanning Applications to Detect Vulnerabilities - AST - Process of Making Apps Resistant to Security Threats - 3D Illustration
Google bug bounty payments hit nearly $12 million in 2024
A woman at a table using a Windows laptop, opposite sits a man, neither show their face
Microsoft will now pay you even more to find security bugs in Copilot
Facebook on laptop
Researcher nets major reward for finding Facebook bug able to unlock the gates to its internal systems
 In this photo illustration a Google Play logo seen displayed on a smartphone.
Over 2 million risky Android apps were blocked from the Play Store last year
the YouTube logo on a screen in front of other YouTube logos covering a black background
Worrying YouTube security flaw exposed billions of user emails
NordVPN
US hit with over 1.9 billion malware threats last year - here's how to stay safe
Latest in Security
A graphic showing someone on a tablet working through a supply chain.
Security issue in open source software leaves businesses concerned for systems
ransomware avast
One of the most powerful ransomware hacks around has been cracked using some serious GPU power
person at a computer
Infamous ransomware hackers reveal new tool to brute-force VPNs
person at a computer
Many workers are overconfident at spotting phishing attacks
A fish hook is lying across a computer keyboard, representing a phishing attack on a computer system
Microsoft 365 accounts are under attack from new malware spoofing popular work apps
Data Breach
Thousands of healthcare records exposed online, including private patient information
Latest in News
Metroid Prime 4
I reckon the Nintendo Switch 2 could launch with Metroid Prime 4 – here’s why
Pebble smartwatch countdown
Pebble confirms its smartwatch announcement is just hours away
Logo of YouTube Shorts
Is YouTube auto-playing Shorts when you open the app? Well, you’re not alone - here’s how to fix it
Google DeepMind panel discussion
“More sovereignty and protection” - Google goes all-in on UK AI with data residency, upskilling projects, and startup investments
Nintendo Switch 2
Nintendo Switch 2 expected to have AI upscaling and I can't wait to finally play Tears of the Kingdom with upgraded graphics
PowerColor Red Devil AMD RX 9070 XT graphics card shown side-on
Your next GPU could be from AMD, not Nvidia, if Team Red’s success with PC gamers continues