2023: Google Pays $10M for Finding Vulnerabilities

Google summarized the results of its Vulnerability Reward Program for 2023, which involves paying rewards to researchers who identify vulnerabilities in Chrome, Android, Google Play applications, Google products, and various open software. In 2023, a total of $10 million was paid out in rewards, which is $2 million less than the previous year but $1 million more than in 2022. A total of 632 researchers received rewards in 2023, compared to 703 the previous year. Since the program began in 2010, the total amount of payments has reached $59 million.

In 2023, $3.4 million (compared to $4.8 million the previous year) was paid for vulnerabilities found in Android, $2.1 million ($3.5 million) in Chrome, and $87,000 for vulnerabilities in projects related to machine learning. The largest single payment in 2023 amounted to $113,000.