Security research platform · vendor
Google Bug Hunters
Google's own VRP covering Google-owned web/apps, Chrome, Android, and open-source (OSS VRP). High payouts, deep single-target work.
Overview
Research on Google Bug Hunters
Self-hosted (not a marketplace). Best when you want to go deep on one product ecosystem rather than breadth.
- Program type
- First-party VRP
- Regions
- Global
- Payout
- USD; among the highest per-bug rewards, plus published reward tables
Field notes
Practical guidance
- Chrome and Android have their own detailed reward tiers - read them before investing time.
- OSS VRP pays for bugs in Google's critical open-source projects.
Primary source
Official links
Version history: normalized permanent page created 2026-08-20. Verify current platform terms before testing.