Google to offer up to 20K prize for bug finds

Share this article:
Google has significantly increased its finder's fee for vulnerability researchers. The web giant announced Monday that it is now offering $20,000 for bugs that could permit code execution on its production systems; $10,000 for flaws that can lead to issues like SQL injection, information disclosure and authorization bypass; and up to $3,133.70 for identifying cross-site scripting and cross-site request forgery weaknesses in applications. For less critical vulnerabilities, researchers will be paid based on the level of risk to users. Google's bug bounty program formally was launched roughly two years ago and rewards individuals who find security defects in Chrome, Google, YouTube, Wallet, among other properties.
Share this article:

Sign up to our newsletters

More in News

Firefox 31 plugs critical memory safety bugs

In total, Firefox 31 brings 11 patches for several flaws affecting the web browser.

Android/Simplocker adds tricks, including ransom message in English

Android/Simplocker ransomware now encrypts archive files, asks to be installed as a Device Administrator, and delivers an English-language ransom message.

Wall Street Journal website vulnerable to SQL injection, gets hacked

The Wall Street Journal confirmed on Tuesday that an outside party exploited a vulnerability and hacked into its new graphics systems.