Security News > 2021 > October > Google launches Android Enterprise bug bounty program
Google has announced the launch of its first vulnerability rewards program for Android Enterprise with bounties of up to $250,000.
"And since we believe scrutiny and transparency are key to improving security, we've launched our first Android Enterprise Vulnerability Rewards Program," said Rajeev Pathak, Senior Product Manager at Google.
The company is also introducing the Android Management API, which would provide the fastest delivery for enterprise features, with Android Enterprise Recommended requirements set by default.
Google also launched the Bug Hunter University, enabling bug hunters to brush up on their skills or even start a hunting learning streak.
Google says that the total bounty earned by researchers amounts to $29,357,516 since January 2010, when it launched the Chromium vulnerability reward program.
Alpha Lab's Guang Gong received a $201,337 payout for a remote code execution exploit chain that could be used to compromise Pixel 3 devices, this being the biggest single bounty Google ever paid.
News URL
Related news
- Google blocked 2.36 million risky Android apps from Play Store in 2024 (source)
- Google Bans 158,000 Malicious Android App Developer Accounts in 2024 (source)
- Google fixes Android kernel zero-day exploited in attacks (source)
- Google Patches 47 Android Security Flaws, Including Actively Exploited CVE-2024-53104 (source)
- Google patches odd Android kernel security bug amid signs of targeted exploitation (source)
- Crypto-stealing iOS, Android malware found on App Store, Google Play (source)
- Microsoft raises rewards for Copilot AI bug bounty program (source)
- Google Confirms Android SafetyCore Enables AI-Powered On-Device Content Classification (source)
- Microsoft expands Copilot bug bounty targets, adds payouts for even moderate messes (source)
- SpyLend Android malware downloaded 100,000 times from Google Play (source)