XDA Developers

Vulnerability Rewards Program

Readers like you help support XDA Developers. When you make a purchase using links on our site, we may earn an affiliate commission. Read More.

latest

Google Bug Hunters
Google unifies its Vulnerability Rewards Program sites for Android, Chrome, and Play

Google's new Bug Hunters platform unifies its Vulnerability Rewards Program sites for Android, Chrome, Play, and more.

4
By 

Google's Vulnerability Rewards Program (VRP) rewards security researchers for reporting security flaws in Google products. The program spans across multiple products, like Android, Chrome, and Google Play, and dishes out some serious cash. Google paid security researchers a record $6.7 million through the program last year and $6.5 million the year before that. Since its launch a little over ten years ago, the company has paid almost $30 million in rewards to over 2000 researchers across 84 different countries. To keep this trend going and encourage more security researchers to participate in the program, Google has now announced a new unified platform called Bug Hunters.

Huawei logo on blue background
Huawei opens a Vulnerability Reward Program with a max payout of ~$143,000

Huawei has opened up the vulnerability reward program, which has a maximum payout of around $143,000 depending on the severity of a vulnerability.

4
By 

Mobile security is important for a number of reasons, no less because most of our personal lives now reside on our smartphones. From photographs to social media, anybody with malicious access to your device could, in theory, cause a number of problems in your life. That's why it's important to make sure you have the latest security patches and to be sure not to install anything that could steal your data or damage your phone. While some vulnerabilities are in AOSP, some vulnerabilities may be in the custom software used by device OEMs like EMUI. As such, Huawei has opened up the vulnerability reward program in partnership with 360 Mobile Security that has a maximum payout of RMB 1 million (roughly $143,000) should it be deemed serious enough once reported.