Overview

• Google awarded $10 million in bug bounties in 2023, marking the second highest payout in the program's history.
• The highest single payout was $113,337, with rewards going to 632 researchers from 68 countries for discovering vulnerabilities in Google products.
• Google's Android OS saw significant focus, with $3.4 million in rewards for vulnerabilities, and the maximum reward for Android-related discoveries increased to $15,000.
• Generative AI platforms were added to the Vulnerability Reward Program, with 35 reports paid out totaling $87,000.
• Live hacking events and security conferences played a key role in uncovering vulnerabilities, with significant rewards for findings in Wear OS, Android Auto, and Google's hardware products.