Security News > 2021 > October > Google launches Android Enterprise bug bounty program
Google has announced the launch of its first vulnerability rewards program for Android Enterprise with bounties of up to $250,000.
"And since we believe scrutiny and transparency are key to improving security, we've launched our first Android Enterprise Vulnerability Rewards Program," said Rajeev Pathak, Senior Product Manager at Google.
The company is also introducing the Android Management API, which would provide the fastest delivery for enterprise features, with Android Enterprise Recommended requirements set by default.
Google also launched the Bug Hunter University, enabling bug hunters to brush up on their skills or even start a hunting learning streak.
Google says that the total bounty earned by researchers amounts to $29,357,516 since January 2010, when it launched the Chromium vulnerability reward program.
Alpha Lab's Guang Gong received a $201,337 payout for a remote code execution exploit chain that could be used to compromise Pixel 3 devices, this being the biggest single bounty Google ever paid.
News URL
Related news
- Google paid $10 million in bug bounty rewards last year (source)
- Free VPN apps on Google Play turned Android phones into proxies (source)
- Google Warns: Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies (source)
- Google rolls out new Find My Device network to Android devices (source)